%% You should probably cite draft-spencer-oauth-claims-01 instead of this revision.
@techreport{spencer-oauth-claims-00,
    number =    {draft-spencer-oauth-claims-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-spencer-oauth-claims/00/},
    author =    {Travis Spencer},
    title =     {{The OAuth 2.0 Authorization Framework: Claims}},
    pagetotal = 28,
    year =      2019,
    month =     nov,
    day =       4,
    abstract =  {This document extends the OAuth 2.0 framework to include a simple query language that can be used by clients to request certain claims from an authorization server. This mechanism can be used during the authorization request and refresh request. It also defines a response parameter of the token and introspection endpoints that indicates to the caller which claims were authorized by the resource owner. Lastly, it stipulates how this request parameter can be used during token exchange, and how clients may request that certain claims be placed in an access token intended for a particular resource server.},
}