I have just published a new Internet Draft (I-D). It concerns the hyperlinked OAuth that I discussed at IETF 85. At the meeting, someone pointed out that “_links” could represent not only hyperlinks but metadata in general, so the title became something along the lines of “JSON Metadata for OAuth 2.0 Responses.” It is a short document of only 9 pages. It will be discussed on the OAuth WG mailing list.
This -00 version mainly contains what I previously wrote on my blog. Defining additional relationships, such as public keys, remains a task for the future.
Enjoy!
A new version of I-D, draft-sakimura-oauth-meta-00.txt
has been successfully submitted by Nat Sakimura and posted to the
IETF repository.
Filename: draft-sakimura-oauth-meta
Revision: 00
Title: JSON Metadata for OAuth Responses
Creation date: 2012-12-12
WG ID: Individual Submission
Number of pages: 9
URL: http://www.ietf.org/internet-drafts/draft-sakimura-oauth-meta-00.txt
Status: http://datatracker.ietf.org/doc/draft-sakimura-oauth-meta
Htmlized: http://tools.ietf.org/html/draft-sakimura-oauth-meta-00
Abstract:
This specification defines an extensible metadata member that may be
inserted into the OAuth 2.0 responses to assist the clients to
process those responses. It is expressed as a member called “_links”
that is inserted as the top level member in the responses. It will
allow the client to learn where the members in the response could be
used and how, etc. Since it is just a member, any client that does
not understand this extension should not break and work normally
while supporting clients can utilize the metadata to its advantage.
Related posts
Celebrating RFC 9901! SD-JWT Becomes an Internet Standard — A New Rule for the Digital ID Wallet Era: “Show Only What Is Necessary” — An Overview of SD-JWT, the Core Format Supporting Verifiable Credentials and Identity Wallets
1. The Birth of RFC 9901 On November 19, 2025, the specification defining “Selective Disclosure for JSON Web Tokens,” commonly known as SD-JWT (pronounced “ess-dee-jot”), was…
IETF 123: OAuth WG Session 2 Summary (Japan Time, the 25th)
Quite some time has passed, and my memory is already hazy... Below, I will see whether I can remember it while rewriting the summary that NotebookLM…
IETF 123: OAuth WG Session 1 Summary (Japan Time, Day 24)
Overview On July 24 Japan time, OAuth WG Session 123 at IETF 1 Madrid was held. The previously announced agenda was as follows, but a session…