Skip to main content

OAuth 2.0 Token Exchange
RFC 8693

Revision differences

Document history

Date By Action
2026-05-20
(System) Changed metadata: changed keywords to '['JSON Web Token', 'JWT', 'Delegation', 'Impersonation', 'STS', 'Security Token Service', 'Exchange', 'Token', 'OAuth']' from '[]'
2026-05-20
(System) Metadata update from RFC Editor
2026-05-20
(System) Changed author "C. Mortimore": changed name from "Chuck Mortimore" to "C. Mortimore", changed affiliation from "Salesforce" to "Visa", changed order from "4" to "5"
2026-05-20
(System) Changed author "J. Bradley": changed name from "John Bradley" to "J. Bradley", changed order from "3" to "4"
2026-05-20
(System) Changed author "B. Campbell": changed name from "Brian Campbell" to "B. Campbell", changed is_editor from "False" to "True", changed order from "2" to "3"
2026-05-20
(System) Changed author "A. Nadalin": changed name from "Anthony Nadalin" to "A. Nadalin", changed order from "1" to "2"
2026-05-20
(System) Changed author "M. Jones": changed name from "Michael Jones" to "M. Jones", changed order from "0" to "1"
2026-05-20
(System) Metadata update from RFC Editor
2023-05-10
(System) Received changes through RFC Editor sync (added Errata tag)
2020-01-15
(System)
Received changes through RFC Editor sync (created alias RFC 8693, changed abstract to 'This specification defines a protocol for an HTTP- and JSON-based Security …
Received changes through RFC Editor sync (created alias RFC 8693, changed abstract to 'This specification defines a protocol for an HTTP- and JSON-based Security Token Service (STS) by defining how to request and obtain security tokens from OAuth 2.0 authorization servers, including security tokens employing impersonation and delegation.', changed pages to 27, changed standardization level to Proposed Standard, changed state to RFC, added RFC published event at 2020-01-15, changed IESG state to RFC Published)
2020-01-15
(System) RFC published