Overview#Response Mode (Response_mode) is an OPTIONAL OAuth Authorization Request parameter that informs the Authorization Server of the mechanism to be used for returning Authorization Response parameters from the Authorization_endpoint.
This specification defines the following Response Modes, which are described with their Response_mode parameter values:
- query - In this Response_mode, Authorization Response parameters are encoded in the query string added to the redirect_uri when redirecting back to the OAuth Client.
- fragment - In this Response_mode, Authorization Response parameters are encoded in the fragment added to the redirect_uri when redirecting back to the OAuth Client.
default Response Mode#The default Response Mode is dependent on the response_type provided by the OAuth Client:
See OAuth 2.0 Form Post Response Mode (form_post) for an example of a specification that defines an additional Response Mode. Note that it is expected that additional Response Modes may be defined by other specifications in the future, including possibly ones utilizing the HTML5 postMessage API and Cross Origin Resource Sharing (CORS).