diff --git a/README.md b/README.md index 8e7e626..6f725c9 100644 --- a/README.md +++ b/README.md @@ -81,7 +81,7 @@ function onClickLogin() { console.info('Secure PPID (aka subject):', session.token.sub); return oauth3.request({ - url: 'https://oauth3.org/api/org.oauth3.provider/inspect' + url: 'https://oauth3.org/api/issuer@oauth3.org/inspect_token' , session: session }).then(function (resp) { @@ -239,7 +239,7 @@ function onClickLogin() { console.info('Secure PPID (aka subject):', session.token.sub); return OAUTH3.request({ - url: 'https://oauth3.org/api/org.oauth3.provider/inspect_token' + url: 'https://oauth3.org/api/issuer@oauth3.org/inspect_token' , session: session }).then(function (resp) { @@ -464,10 +464,10 @@ Since we do not require the `protocol` to be specified, it is a URI However, we do have a problem of disambiguation since a URI may look like a `path`: -1. https://example.com/api/org.oauth3.provider -2. example.com/api/org.oauth3.provider/ (not unique) -3. /api/org.oauth3.provider -4. api/org.oauth3.provider (not unique) +1. https://example.com/api/issuer@oauth3.org +2. example.com/api/issuer@oauth3.org/ (not unique) +3. /api/issuer@oauth3.org +4. api/issuer@oauth3.org (not unique) Therefore anywhere a URI or a Path could be used, the URI must be a URL. We eliminate #2.