RFC 9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

This specification defines a profile for issuing OAuth 2.0 access tokens in JSON Web Token (JWT) format. Authorization servers and resource servers from…

Read RFC 9068 on the RFC Editor

Outgoing relationships (16 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 2046: Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types
Normative reference — RFC 6838: Media Type Specifications and Registration Procedures
Normative reference — RFC 7519: JSON Web Token (JWT)
Normative reference — RFC 6749: The OAuth 2.0 Authorization Framework
Normative reference — RFC 7515: JSON Web Signature (JWS)
Normative reference — RFC 7518: JSON Web Algorithms (JWA)
Normative reference — RFC 8414: OAuth 2.0 Authorization Server Metadata
Normative reference — RFC 8725: JSON Web Token Best Current Practices
Normative reference — RFC 8707: Resource Indicators for OAuth 2.0
Normative reference — RFC 7643: System for Cross-domain Identity Management: Core Schema
Normative reference — RFC 8693: OAuth 2.0 Token Exchange
Informative reference — RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
Informative reference — RFC 7662: OAuth 2.0 Token Introspection
Informative reference — RFC 7523: JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 9700: Best Current Practice for OAuth 2.0 Security
Normatively referenced by — RFC 9560: Federated Authentication for the Registration Data Access Protocol (RDAP) Using OpenID Connect
Informatively referenced by — RFC 9470: OAuth 2.0 Step Up Authentication Challenge Protocol