RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage

This specification describes how to use bearer tokens in HTTP requests to access OAuth 2.0 protected resources. Any party in possession of a bearer token (a…

Read RFC 6750 on the RFC Editor

Outgoing relationships (10 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 2818: HTTP Over TLS
Normative reference — RFC 2246: The TLS Protocol Version 1.0
Normative reference — RFC 2617: HTTP Authentication: Basic and Digest Access Authentication
Normative reference — RFC 6265: HTTP State Management Mechanism

Incoming relationships (22 related RFCs)

Updated by, Normatively referenced by — RFC 8996: Deprecating TLS 1.0 and TLS 1.1
Updated by, Normatively referenced by — RFC 9700: Best Current Practice for OAuth 2.0 Security
Normatively referenced by — RFC 7662: OAuth 2.0 Token Introspection
Normatively referenced by — RFC 6819: OAuth 2.0 Threat Model and Security Considerations
Normatively referenced by — RFC 8705: OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens
Normatively referenced by — RFC 9200: Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)
Normatively referenced by — RFC 7486: HTTP Origin-Bound Authentication (HOBA)
Normatively referenced by — RFC 7644: System for Cross-domain Identity Management: Protocol
Normatively referenced by — RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)
Normatively referenced by — RFC 7628: A Set of Simple Authentication and Security Layer (SASL) Mechanisms for OAuth
Normatively referenced by — RFC 9470: OAuth 2.0 Step Up Authentication Challenge Protocol
Normatively referenced by — RFC 9560: Federated Authentication for the Registration Data Access Protocol (RDAP) Using OpenID Connect
Normatively referenced by — RFC 7236: Initial Hypertext Transfer Protocol (HTTP) Authentication Scheme Registrations
Normatively referenced by — RFC 7592: OAuth 2.0 Dynamic Client Registration Management Protocol
Normatively referenced by — RFC 8898: Third-Party Token-Based Authentication and Authorization for Session Initiation Protocol (SIP)
Normatively referenced by — RFC 9728: OAuth 2.0 Protected Resource Metadata
Informatively referenced by — RFC 6749: The OAuth 2.0 Authorization Framework
Informatively referenced by — RFC 8707: Resource Indicators for OAuth 2.0
Informatively referenced by — RFC 9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens
Informatively referenced by — RFC 8936: Poll-Based Security Event Token (SET) Delivery Using HTTP
Informatively referenced by — RFC 7165: Use Cases and Requirements for JSON Object Signing and Encryption (JOSE)
Informatively referenced by — RFC 8959: The "secret-token" URI Scheme