@techreport{parecki-oauth-refresh-token-scope-response-00,
    number =    {draft-parecki-oauth-refresh-token-scope-response-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-parecki-oauth-refresh-token-scope-response/00/},
    author =    {Aaron Parecki},
    title =     {{OAuth 2.0 Refresh Token Scope}},
    pagetotal = 12,
    year =      2026,
    month =     jul,
    day =       24,
    abstract =  {This specification defines a new OAuth 2.0 token response parameter, refresh\_token\_scope, that indicates the scope authorized for a refresh token when it differs from the scope of the access token issued alongside it. This allows clients to discover that a refresh token carries broader authorization than the initial access token, enabling just-in-time requests for elevated access without requiring a new authorization flow.},
}