IETF - RFC 9207
OAuth 2.0 Authorization Server Issuer Identification
active, Most Current
| Organization: | IETF |
| Publication Date: | 1 March 2022 |
| Status: | active |
| Page Count: | 9 |
scope:
Abstract
This document specifies a new parameter called iss. This parameter is used to explicitly include the issuer identifier of the authorization server in the authorization response of an OAuth authorization flow. The iss parameter serves as an effective countermeasure to "mix-up attacks".
Document History
RFC 9207
March 1, 2022
OAuth 2.0 Authorization Server Issuer Identification
Abstract
This document specifies a new parameter called iss. This parameter is used to explicitly include the issuer identifier of the authorization server in the authorization response of an OAuth...