OAuth2 and OIDC Specifications

OAuth2

• The OAuth 2.1 Authorization Framework

• The OAuth 2.0 Authorization Framework

• Proof Key for Code Exchange (PKCE)

• Bearer Token Usage

• OAuth 2.0 Token Revocation

• OAuth 2.0 Token Introspection

• OAuth 2.0 Device Authorization Grant

• JSON Web Token (JWT)

• JSON Web Key (JWK)

• JSON Web Signature (JWS)

• JSON Web Encryption (JWE)

• OAuth 2.0 Authorization Server Metadata

• OAuth 2.0 Dynamic Client Registration Protocol

• Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants

• JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants

• Security Assertion Markup Language (SAML) 2.0 Profile for OAuth 2.0 Client Authentication and Authorization Grants

• OAuth 2.0 Token Exchange

• OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens

• OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

• OAuth 2.0 Token Binding

• Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)

• Resource Indicators for OAuth 2.0

• OAuth 2.0 .net

OpenID Connect 1.0

• OpenID Connect 1.0

• OpenID Connect Core 1.0

• OpenID Connect Discovery 1.0

• OpenID Connect Dynamic Client Registration 1.0

• OpenID Connect Session Management 1.0

• OpenID Connect RP-Initiated Logout 1.0

• OpenID Connect Back-Channel Logout 1.0

• OpenID Connect Front-Channel Logout 1.0

Security Best Practices

• OAuth 2.0 Security Best Current Practice

• OAuth 2.0 Threat Model and Security Considerations

• JSON Web Token Best Current Practices

• OAuth 2.0 for Browser-Based Apps

• Token Mediating and Session Information Backend For Frontend

• OAuth 2.0 for Native Apps