%% You should probably cite rfc8707 instead of this I-D. @techreport{ietf-oauth-resource-indicators-08, number = {draft-ietf-oauth-resource-indicators-08}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-resource-indicators/08/}, author = {Brian Campbell and John Bradley and Hannes Tschofenig}, title = {{Resource Indicators for OAuth 2.0}}, pagetotal = 11, year = 2019, month = sep, day = 11, abstract = {This document specifies an extension to the OAuth 2.0 Authorization Framework defining request parameters that enable a client to explicitly signal to an authorization server about the identity of the protected resource(s) to which it is requesting access.}, }