JWT, OAuth, OpenID Connect, SCIM

JWT

• RFC 7515 JSON Web Signature (JWS)
• RFC 7516 JSON Web Encryption (JWE)
• RFC 7517 JSON Web Key (JWK)
• RFC 7518 JSON Web Algorithm (JWA)
• RFC 7519 JSON Web Token (JWT)

OAuth 2.0

• RFC 6749 The OAuth 2.0 Authorization Framework
• RFC 6750 The OAuth 2.0 Authorization Framework: Bearer Token Usage
• RFC 6819 OAuth 2.0 Threat Model and Security Considerations
• RFC 7009 OAuth 2.0 Token Revocation
• RFC 7591 OAuth 2.0 Dynamic Client Registration Protocol
• RFC 7592 OAuth 2.0 Dynamic Client Registration Management Protocol
• RFC 7636 Proof Key for Code Exchange by OAuth Public Clients
• RFC 7662 OAuth 2.0 Token Introspection
• RFC 8252 OAuth 2.0 for Native Apps
• RFC 8414 OAuth 2.0 Authorization Server Metadata
• RFC 8628 OAuth 2.0 Device Authorization Grant
• OAuth 2.0 for Browser-Based Apps (draft)
• OAuth 2.0 Security Best Current Practice (draft)
• OpenID Connect

OpenID Connect Core 1.0

• OpenID Connect Discovery 1.0
• OpenID Connect Dynamic Client Registration
• OAuth 2.0 Multiple Response Type Encoding Practice 1.0
• OAuth 2.0 Form Post Response Mode
• OpenID Connect Session Management 1.0 (draft)
• OpenID Connect Front-Channel Logout 1.0 (draft)
• OpenID Connect Back-Channel Logout 1.0 (draft)
• OpenID Connect Federation 1.0 (draft)
• OpenID Connect Profile for SCIM Services
• OpenID Connect for Identity Assurance 1.0

SCIM

• RFC 7642 System for Cross-domain Identity Management: Definitions, Overview, Concepts, and Requirements
• RFC 7642 System for Cross-domain Identity Management: Core Schema
• RFC 7643 System for Cross-domain Identity Management: Protocol