draft-ietf-oauth-security-topics-update

Updates to OAuth 2.0 Security Best Current Practice

streamIETF groupoauth stateactive pages20 rev01 expires2026-09-03 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-oauth-security-topics-update/

This document updates the set of best current security practices for OAuth 2.0 by extending the security advice given in RFC 6749, RFC 6750, and RFC 9700, to cover new threats that have been discovered since the former documents have been published.