draft-mcguinness-token-xchg-target-svc-disco

OAuth 2.0 Token Exchange Target Service Discovery

groupnone stateactive pages18 rev01 expires2026-08-18 canonicalhttps://datatracker.ietf.org/doc/draft-mcguinness-token-xchg-target-svc-disco/
This specification defines a method for OAuth 2.0 clients to discover the set of available target services (audiences, resources, and scopes) for a given subject token when performing OAuth 2.0 Token Exchange. The discovery endpoint accepts any subject token type registered in the OAuth Token Type Registry and returns values that are valid inputs to subsequent Token Exchange requests, supporting advanced use cases such as identity chaining and cross-domain delegation.