IETF RFC 9207
[ACTIVE]
OAuth 2.0 Authorization Server Issuer Identification
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 9
- Abstract
- This document specifies a new parameter called iss. This parameter is used to explicitly include the issuer identifier of the authorization server in the authorization response of an OAuth authorization flow. The iss parameter serves as an effective countermeasure to "mix-up attacks".
- Publication Date
- 2022-03-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC9207- Link
- https://doi.org/10.17487/RFC9207
- Author(s)
- Karsten Meyer zu SelhausenDaniel Fett
- Keyword(s)
- Security, OAuth
Latest version of IETF RFC 9207
Document Versions — IETF RFC 9207
-
▶ IETF RFC 9207 (2022-03-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3986 [Active, Amended*]
- IETF RFC 6749 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8414 [Active*]
Bibliographic Reference(s)
- 10.1145-2976749.2978385 — arXiv.1601.01229 EXTERNAL
- IETF.draft-ietf-oauth-security-topics-19 — I-D.ietf-oauth-security-topics EXTERNAL
- Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and C. Mortimore, "OpenID Connect Core 1.0 incorporating errata set 1", November 2014, <https://openid.net/specs/openid-connect-core-1_0.html>. EXTERNAL
- Lodderstedt, T. and B. Campbell, "Financial-grade API: JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)", October 2018, <https://openid.net/specs/openid-financial-api-jarm.html>. EXTERNAL
- IANA, "OAuth Parameters", <https://www.iana.org/assignments/oauth-parameters>. EXTERNAL
- Mainka, C., Mladenov, V., and J. Schwenk, "On the security of modern Single Sign-On Protocols: Second-Order Vulnerabilities in OpenID Connect", August 2015, <https://arxiv.org/abs/1508.04324>. EXTERNAL
- IETF RFC 7519 [Active*]
- IETF RFC 7591 [Active*]
- IETF RFC 9101 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9207.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9207, OAuth 2.0 Authorization Server Issuer Identification. Available at https://doi.org/10.17487/RFC9207
Snippet:
IETF RFC 9207, OAuth 2.0 Authorization Server Issuer Identification. Available at https://doi.org/10.17487/RFC9207
HTML (ISO 690 compliant)
Preview:
IETF RFC 9207, OAuth 2.0 Authorization Server Issuer Identification. Available at https://doi.org/10.17487/RFC9207
Snippet:
<span class="citation"><cite>IETF RFC 9207</cite>, OAuth 2.0 Authorization Server Issuer Identification. Available at <a href="https://doi.org/10.17487/RFC9207" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9207</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9207, OAuth 2.0 Authorization Server Issuer Identification
doi: 10.17487/RFC9207
url: https://doi.org/10.17487/RFC9207
doi: 10.17487/RFC9207
url: https://doi.org/10.17487/RFC9207
Snippet:
<li> <cite id="bib-rfc9207">IETF RFC 9207</cite>, OAuth 2.0 Authorization Server Issuer Identification <span class="doi">10.17487/RFC9207</span> </li>
Referenced By
- IETF RFC 9700 [Active*]