Title: The OAuth 2.0 Authorization Framework
Category: Authorization Protocol Specification
The OAuth 2.0 Authorization Framework includes the following RFCs:
RFC 6749, OAuth 2.0 Authorization Framework RFC 6750, The OAuth 2.0 Authorization Framework: Bearer Token Usage RFC 6819, OAuth 2.0 Threat Model and Security Considerations RFC 7591, OAuth 2.0 Dynamic Client Registration Protocol RFC 7592, OAuth 2.0 Dynamic Client Registration Management Protocol RFC 7636, Proof Key for Code Exchange by OAuth Public Clients (PKCE, pronounced "pixy")
Description: The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf.
Subsequent Work The IETF has created a new committee on Grant Negotiation and Authorization Protocol (GNAP) that will be working on the next generation of access protocols.
Terms: Access Token, Refresh Token, Authorization Code, Authorization Grant, Authorization Server, Authorization Endpoint, Client, Client Identifier, Client Secret, Client Password, Protected Resource, Resource Owner, Resource Server