{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-20T22:10:55.369Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC8705",
  "document": {
    "abstract": "This document describes OAuth client authentication and certificate-bound access and refresh tokens using mutual Transport Layer Security (TLS) authentication with X.509 certificates. OAuth clients are provided a mechanism for authentication to the authorization server using mutual TLS, based on either self-signed certificates or public key infrastructure (PKI). OAuth authorization servers are provided a mechanism for binding access tokens to a client's mutual-TLS certificate, and OAuth protected resources are provided a method for ensuring that such an access token presented to it was issued to the client presenting the token.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "authors": [
      {
        "name": "Brian Campbell"
      },
      {
        "name": "John Bradley"
      },
      {
        "name": "Nat Sakimura"
      },
      {
        "name": "Torsten Lodderstedt"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docId": "RFC8705",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docLabel": "IETF RFC 8705",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docNumber": "8705",
    "docNumber$meta": {
      "confidence": "high",
      "note": "From the RFC index entry (rfc-index.xml <doc-id>)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docTitle": "OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docType": "Standard",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "doi": "10.17487/RFC8705",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "href": "https://doi.org/10.17487/RFC8705",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "keywords": [
      "JWT",
      "mTLS",
      "Proof-of-Possession",
      "Client Certificate",
      "Key Confirmation",
      "OAuth"
    ],
    "keywords$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML keywords",
      "originalValue": [
        "JWT",
        "MTLS",
        "Mutual TLS",
        "Proof-of-possession",
        "Proof-of-possession Access Token",
        "Key Confirmed Access Token",
        "Certificate-bound Access Token",
        "Client Certificate",
        "X.509 Client Certificate Authentication",
        "Key Confirmation",
        "Confirmation Method",
        "Holder-of-key",
        "OAuth"
      ],
      "overridden": true,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T22:10:55.369Z",
      "version": "extractDocs.js@commit:301bfdf288d8"
    },
    "pages": "24",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "publicationDate": "2020-02-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "references": {
      "bibliographic": [
        "10.1145-2382196.2382204",
        "RFC4517",
        "RFC5952",
        "RFC6066",
        "RFC7009",
        "RFC7518",
        "IETF.draft-ietf-oauth-token-binding-08",
        "orphan/RFC8705/h:3245fc0c",
        "orphan/RFC8705/h:04d2c6c3",
        "orphan/RFC8705/h:90e24cb1",
        "orphan/RFC8705/h:a57a9f9e"
      ],
      "bibliographic$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "normative": [
        "RFC7525",
        "RFC2119",
        "RFC4514",
        "RFC4648",
        "RFC5246",
        "RFC5280",
        "RFC6749",
        "RFC6750",
        "RFC7517",
        "RFC7519",
        "RFC7591",
        "RFC7662",
        "RFC7800",
        "RFC8174",
        "RFC8414",
        "RFC8446",
        "NIST.FIPS.180-4",
        "T-REC-X.690.2015"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc8705/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
      "updated": "2026-10-20T21:46:23.123Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "errataExist": false,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "statusNote": "Proposed Standard",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8705/",
        "updated": "2026-10-20T21:46:23.123Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      }
    }
  }
}