The OAuth 2.0 Authorization Framework
The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. [STANDARDS-TRACK]
Uso en STET
- Versiones1.4.11.4.21.5.01.5.1
Authorization Code grant with PKCE is the baseline; STET also uses client_credentials and refresh_token. The OAuth2 `password` grant was supported in early versions.
- Versiones1.6.21.6.3
The OAuth2 `password` grant was dropped and replaced by CIBA (`ciba`) in the allowed grant types; `response_type` is restricted to `code`.
Metadatos factuales: IETF Datatracker (doc.json) + BibXML.