OAuth 2.0 for Native Apps

Metadata

Publisher: IETF
Doc Type: Best Practice
Pages: 21
Abstract: OAuth 2.0 authorization requests from native apps should only be made through external user-agents, primarily the user's browser. This specification details the security and usability reasons why this is the case and how native apps and authorization servers can implement this best practice.
Publication Date: 2017-10-01
Status Note: Best Current Practice
DOI: 10.17487/RFC8252
Link: https://doi.org/10.17487/RFC8252
Author(s): William Denniss
John Bradley

Latest version of IETF RFC 8252

Document Versions — IETF RFC 8252

▶ IETF RFC 8252 (2017-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 6749 [Active*]
IETF RFC 7230 [Superseded*]
IETF RFC 7595 [Active*]
IETF RFC 7636 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

McGinniss, I., Denniss, W., et al., "AppAuth for Android", February 2016, < https://openid.net/code/AppAuth-Android >. EXTERNAL
Wright, S., Denniss, W., et al., "AppAuth for iOS and macOS", February 2016, < https://openid.net/code/AppAuth-iOS >. EXTERNAL
OpenID Connect Working Group, "AppAuth", September 2017, < https://openid.net/code/AppAuth >. EXTERNAL
Denniss, W., "OAuth for Apps: Samples for Windows", July 2016, < https://openid.net/code/sample-oauth-apps-for-windows >. EXTERNAL
RFC6819 — RFC6819 EXTERNAL
RFC7591 — RFC7591 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8252.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8252, OAuth 2.0 for Native Apps. Available at https://doi.org/10.17487/RFC8252

Snippet:

IETF RFC 8252, OAuth 2.0 for Native Apps. Available at https://doi.org/10.17487/RFC8252

HTML (ISO 690 compliant)

Preview:

IETF RFC 8252, OAuth 2.0 for Native Apps. Available at https://doi.org/10.17487/RFC8252

Snippet:

<span class="citation"><cite>IETF RFC 8252</cite>, OAuth 2.0 for Native Apps. Available at <a href="https://doi.org/10.17487/RFC8252" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8252</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8252, OAuth 2.0 for Native Apps
doi: 10.17487/RFC8252
url: https://doi.org/10.17487/RFC8252

Snippet:

<li>
<cite id="bib-rfc8252">IETF RFC 8252</cite>, OAuth 2.0 for Native Apps
<span class="doi">10.17487/RFC8252</span>
</li>

Referenced By

IETF RFC 8898 [Active*]
IETF RFC 9700 [Active*]