Skip to main content

OAuth 2.0 Web Message Response Mode for Popup- and Iframe-based Authorization Flows
draft-meyerzuselha-oauth-web-message-response-mode-00

Document Type Expired Internet-Draft (individual)
Expired & archived
Authors Karsten Meyer zu Selhausen , Louis Jannett , Christian Mainka
Last updated 2024-05-26 (Latest revision 2023-11-23)
RFC stream (None)
Intended RFC status (None)
Formats
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This specification defines the web message response mode that authorization servers use for transmitting authorization response parameters via the user-agent's postMessage API to the client. This mode is intended for authorization flows that use secondary windows, which are well-suited for browser-based applications.

Authors

Karsten Meyer zu Selhausen
Louis Jannett
Christian Mainka

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)