Title

OAuth 2.0 HTTP Message Signatures Profile

Description

The OAuth 2.0 framework provides methods for Clients to get delegated access tokens as bearer tokens from an Authorization Server for accessing protected resources. The OAuth 2.0 HTTP Message Signatures Profile defines an access token type that binds the access token to a cryptographic key known to the Client1. The Client uses HTTP Message Signatures2to digitally sign requests using its key, thereby proving Proof-of-Possession to present the access token to the Resource Server.

Taxonomy

Standards

Guidance

Status

Utilization