JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 15
Abstract: This specification defines a profile for issuing OAuth 2.0 access tokens in JSON Web Token (JWT) format. Authorization servers and resource servers from different vendors can leverage this profile to issue and consume access tokens in an interoperable manner.
Publication Date: 2021-10-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9068
Link: https://doi.org/10.17487/RFC9068
Author(s): Vittorio Bertocci
Keyword(s): OAuth, Resource, JWT

Latest version of IETF RFC 9068

Document Versions — IETF RFC 9068

▶ IETF RFC 9068 (2021-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and C. Mortimore, "OpenID Connect Core 1.0 incorporating errata set 1", November 2014, <https://openid.net/specs/openid-connect-core-1_0.html>. EXTERNAL
Sakimura, N., Bradley, J., Jones, M., and E. Jay, "OpenID Connect Discovery 1.0 incorporating errata set 1", November 2014, <https://openid.net/specs/openid-connect-discovery-1_0.html>. EXTERNAL
IETF RFC 2046 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 6749 [Active*]
IETF RFC 6838 [Active*]
IETF RFC 7515 [Active*]
IETF RFC 7518 [Active*]
IETF RFC 7519 [Active*]
RFC7643 — RFC7643 EXTERNAL
IETF RFC 8174 [Active*]
IETF RFC 8414 [Active*]
RFC8693 — RFC8693 EXTERNAL
IETF RFC 8707 [Active*]
IETF RFC 8725 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-oauth-security-topics-18 — I-D.ietf-oauth-security-topics EXTERNAL
IANA, "Media Types", <https://www.iana.org/assignments/media-types/>. EXTERNAL
IETF RFC 6750 [Active*]
IETF RFC 7523 [Active*]
IETF RFC 7662 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9068.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9068, JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens. Available at https://doi.org/10.17487/RFC9068

Snippet:

IETF RFC 9068, JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens. Available at https://doi.org/10.17487/RFC9068

HTML (ISO 690 compliant)

Preview:

IETF RFC 9068, JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens. Available at https://doi.org/10.17487/RFC9068

Snippet:

<span class="citation"><cite>IETF RFC 9068</cite>, JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens. Available at <a href="https://doi.org/10.17487/RFC9068" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9068</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9068, JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens
doi: 10.17487/RFC9068
url: https://doi.org/10.17487/RFC9068

Snippet:

<li>
<cite id="bib-rfc9068">IETF RFC 9068</cite>, JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens
<span class="doi">10.17487/RFC9068</span>
</li>

Referenced By

IETF RFC 9700 [Active*]