Draft -02 of the OAuth 2.0 Token Exchange specification has been published, making the functionality token type independent. Formerly, only JSON Web Tokens (JWTs) could be used in some contexts. This was a change requested by working group participants during IETF 92 in Dallas.
The specification is available at:
An HTML formatted version is also available at:
Leave a Reply
You must be logged in to post a comment.