The OAuth 2.0 Authorization Framework

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 76
Abstract: The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. [STANDARDS-TRACK]
Publication Date: 2012-10-01
Status Note: Proposed Standard
DOI: 10.17487/RFC6749
Link: https://doi.org/10.17487/RFC6749
Author(s): Dick Hardt
Keyword(s): Resource Owner, Resource Server, Protected Resource, Refresh Token, Access Token Scope

Latest version of IETF RFC 6749

Document Versions — IETF RFC 6749

▶ IETF RFC 6749 (2012-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

RFC8252 NOT IN REGISTRY
IETF RFC 8996 [Active*]
RFC9700 NOT IN REGISTRY

Normative Reference(s)

ANSI/INCITS X3.4:1986 (R1997) [Active]
IETF RFC 2119 [Active*]
IETF RFC 2246 [Superseded*]
IETF RFC 2616 [Superseded*]
IETF RFC 2617 [Superseded*]
IETF RFC 2818 [Superseded*]
IETF RFC 3629 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4627 [Superseded*]
IETF RFC 4949 [Active*]
IETF RFC 5226 [Superseded*]
IETF RFC 5234 [Active, Amended*]
IETF RFC 5246 [Superseded*]
IETF RFC 6125 [Superseded*]
W3C.html401.19991224 — [HTML-4.01] REC-html401-19991224, W3C Recommendation: HTML 4.01 Specification (December 24 th , 1999). EXTERNAL
W3C XML 1 [Active]

Bibliographic Reference(s)

Campbell, B. and C. Mortimore, "SAML 2.0 Bearer Assertion Profiles for OAuth 2.0", Work in Progress, September 2012. EXTERNAL
Hardt, D., Ed., Tom, A., Eaton, B., and Y. Goland, "OAuth Web Resource Authorization Profiles", Work in Progress, January 2010. EXTERNAL
Lodderstedt, T., Ed., McGloin, M., and P. Hunt, "OAuth 2.0 Threat Model and Security Considerations", Work in Progress, October 2012. EXTERNAL
Hammer-Lahav, E., Ed., "HTTP Authentication: MAC Access Authentication", Work in Progress, February 2012. EXTERNAL
RFC5849 — RFC5849 EXTERNAL
IETF RFC 6750 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6749.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6749, The OAuth 2.0 Authorization Framework. Available at https://doi.org/10.17487/RFC6749

Snippet:

IETF RFC 6749, The OAuth 2.0 Authorization Framework. Available at https://doi.org/10.17487/RFC6749

HTML (ISO 690 compliant)

Preview:

IETF RFC 6749, The OAuth 2.0 Authorization Framework. Available at https://doi.org/10.17487/RFC6749

Snippet:

<span class="citation"><cite>IETF RFC 6749</cite>, The OAuth 2.0 Authorization Framework. Available at <a href="https://doi.org/10.17487/RFC6749" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6749</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6749, The OAuth 2.0 Authorization Framework
doi: 10.17487/RFC6749
url: https://doi.org/10.17487/RFC6749

Snippet:

<li>
<cite id="bib-rfc6749">IETF RFC 6749</cite>, The OAuth 2.0 Authorization Framework
<span class="doi">10.17487/RFC6749</span>
</li>

Referenced By

Technology Components for a Data-Driven Personalized Media Experience in Broadcasting [Active]
Next-Generation OTT Distribution Architecture Supporting Multicast-Assisted ABR (mABR) and HTTP/3 Over QUIC [Active]
Program-Production System Consisting of Multiple NMOS-Compliant Systems [Active]
SMPTE ST 2138: A Standardized Approach to Control [Active]
Next Generation OTT Distribution Architecture Supporting Multicast-Assisted ABR (mABR) and HTTP/3 over QUIC [Active]
Program-Production System Consisting of Multiple NMOS-Compliant Systems [Active]
IETF RFC 6750 [Active*]
IETF RFC 7397 [Active*]
IETF RFC 7452 [Active*]
IETF RFC 7636 [Active*]
IETF RFC 8996 [Active*]