RFC9396 — OAuth 2.0 Rich Authorization Requests | SpecAtlas