946
edits
No edit summary |
No edit summary |
||
| Line 65: | Line 65: | ||
and password (from the first step) to its database. | and password (from the first step) to its database. | ||
--- confirm-registration(<token>) --> | --- confirm-registration (note <token> is in header) --> | ||
<-- 200 OK, final username --- | <-- 200 OK, final username --- | ||
A variant of the above could be to allow the password to be changed during the registration flow, but that would require the final confirmation step to return the credentials (username and password both), which sites might not want to do (?). | A variant of the above could be to allow the password to be changed during the registration flow, but that would require the final confirmation step to return the credentials (username and password both), which sites might not want to do (?). The confirm-registration step need only work once, however, the <token> in the cookie could expire after first use, or have a very short life. | ||
= Rejected Ideas = | = Rejected Ideas = | ||
edits