William Denniss' suggestion about Cache-Control: no-cache, no-store

William Dennis suggested this to me in e-mail:

Update examples using Pragma: no-cache to also include Cache-Control: no-cache, no-store and add language "Because the Authorization Response is intended to be used only once, the Authorization Server MUST instruct the User Agent (and any intermediaries) not to store or reuse the content of the response." as was done in the Form Post Response Mode draft.

‌

Comments (5)