draft-ietf-oauth-resource-metadata-01
aaronpk
released this
21 Oct 02:29
·
95 commits
to main
since this release
- Renamed
scopes_provided
toscopes_supported
- Added security consideration for
scopes_supported
- Use BCP 195 for TLS recommendations
- Clarified that resource metadata can be used by clients and authorization servers
- Updated references
- Added security consideration recommending audience-restricted access tokens
- Mention FAPI Message Signing as a use case for publishing signing keys