Skip to main content

A Framework For Decentralized Bearer Token Issuance in HTTP
draft-thornburgh-fwk-dc-token-iss-01

Document Type Expired Internet-Draft (individual)
Expired & archived
Author Michael C. Thornburgh
Last updated 2021-03-08 (Latest revision 2020-08-26)
RFC stream (None)
Intended RFC status (None)
Formats
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This memo describes a protocol framework for HTTP clients to obtain bearer tokens for accessing restricted resources, where in some applications the client may not have prior knowledge of, or a direct relationship with, the resource server's authorization infrastructure (such as in decentralized identity systems). Semi-concrete applications of the framework using proof-of-possession and TLS client certificate mechanisms are also described.

Authors

Michael C. Thornburgh

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)