IETF OAuth · Protocol
JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants
Lets a JWT serve as an authorization grant at the token endpoint, or as the client's credential, so an assertion from a trusted issuer can be exchanged for an access token.
PublishedProposed StandardCanonical documentrfc7523
Revisions
- rfccurrent
Relations 2
JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants builds on 1
- The OAuth 2.0 Authorization FrameworkpublishedDefines a JWT assertion grant and JWT client authentication for the token endpoint.Source
JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants is built on by 1
- Identity Assertion JWT Authorization GrantWG draftThe resulting JWT authorization grant is presented to the resource's authorization server as a JWT bearer assertion.Source
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.