<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.mcguinness-oauth-client-ip-ranges" target="https://datatracker.ietf.org/doc/html/draft-mcguinness-oauth-client-ip-ranges-00">
   <front>
      <title>OAuth Client IP Range Metadata</title>
      <author initials="K." surname="McGuinness" fullname="Karl McGuinness">
         <organization>Independent</organization>
      </author>
      <author initials="X." surname="Zhang" fullname="Xiaoyi Zhang">
         <organization>Databricks</organization>
      </author>
      <date month="October" day="28" year="2026" />
      <abstract>
	 <t>   This specification defines OAuth client metadata parameters for
   declaring the IP address ranges from which a client originates
   network requests.  The client_ip_ranges parameter carries a set of
   IPv4 and IPv6 prefixes by value.  The client_ip_ranges_uri parameter
   references an HTTPS resource containing the set, so that large and
   frequently changing sets can use standard HTTP retrieval and caching.
   The specification also defines how authorization servers validate,
   accept, and retain declared ranges.  The parameters can be used with
   OAuth 2.0 Dynamic Client Registration, OAuth Client ID Metadata
   Documents, and other mechanisms that convey client metadata.
   Authorization servers and other parties that obtain a client&#x27;s
   metadata can use the declared ranges as an input to network access
   control.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-mcguinness-oauth-client-ip-ranges-00" />
   
</reference>
