OAuth 2.0 Token Exchange, January 2020
- File formats:
- PROPOSED STANDARD
- M. Jones
B. Campbell, Ed.
- oauth (sec)
Discuss this RFC: Send questions or comments to firstname.lastname@example.org
This specification defines a protocol for an HTTP- and JSON-based Security Token Service (STS) by defining how to request and obtain security tokens from OAuth 2.0 authorization servers, including security tokens employing impersonation and delegation.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 4844.