RFC6749

The OAuth 2.0 Authorization Framework

activeupdatederratarelcompleterefcompletedraftscaptured

Details

Type: Proposed Standard
Published: 2012-10-13Development History
IETF Stream: IETF
doi: 10.17487/RFC6749
Canonical URL: https://www.rfc-editor.org/rfc/rfc6749.txtText (ASCII)
HTML: https://www.rfc-editor.org/rfc/rfc6749.html
Plain text: https://www.rfc-editor.org/rfc/rfc6749.txt
Other URL: https://datatracker.ietf.org/doc/rfc6749/IETF Datatracker

Controlling Organization

Internet Engineering Task Force

Web Authorization Protocol working group

https://datatracker.ietf.org/wg/oauth/about/

Relationships

OBSOLETES

RFC5849 — The OAuth 1.0 Protocol

UPDATED BY

RFC8996 — Deprecating TLS 1.0 and TLS 1.1

UPDATED BY

RFC8252 — OAuth 2.0 for Native Apps

UPDATED BY

RFC9700 — Best Current Practice for OAuth 2.0 Security

References

informative

draft-hardt-oauth-01 — OAuth Web Resource Authorization Profiles

informative

draft-ietf-oauth-v2-threatmodel-08 — OAuth 2.0 Threat Model and Security Considerations

informative

draft-ietf-oauth-saml2-bearer-14 — SAML 2.0 Bearer Assertion Profiles for OAuth 2.0

informative

draft-ietf-oauth-v2-http-mac-01 — HTTP Authentication: MAC Access Authentication

normative

US-ASCII [ANSI X3.4-1986] — American National Standard for Information Systems - Coded Character Sets - 7-Bit American National Standard Code for Information Interchange (7-Bit ASCII)

normative

RFC3629 — UTF-8, a Transformation Format of ISO 10646

normative

RFC4949 — Internet Security Glossary, Version 2

Artifacts

securityProtocolauthorizationProtocol

OAuth version 2.0

protocolRoleprincipalRole

OAuth Resource Owner role

protocolRoleresourceRole

OAuth Resource Server role

protocolRolerequestingRole

OAuth Client role

protocolRoleauthorityRole

OAuth Authorization Server role

interactionPatternuserAgentMediatedFlow-AuthZ

OAuth Authorization Code grant flow

interactionPatternuserAgentMediatedFlow-AuthZ

OAuth Implicit grant flow

interactionPatterndirectCredentialFlow-AuthZ

OAuth Resource Owner Password Credentials grant flow