OAuth 2.0 Token Exchange, January 2020
- File formats:
- Also available: XML file for editing
- PROPOSED STANDARD
- M. Jones
B. Campbell, Ed.
- oauth (sec)
Discuss this RFC: Send questions or comments to the mailing list [email protected]
This specification defines a protocol for an HTTP- and JSON-based Security Token Service (STS) by defining how to request and obtain security tokens from OAuth 2.0 authorization servers, including security tokens employing impersonation and delegation.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.