RFC6819 · OAuth 2.0 Threat Model and Security Considerations

{
  "id": "RFC6819",
  "number": 6819,
  "title_en": "OAuth 2.0 Threat Model and Security Considerations",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document gives additional security considerations for OAuth, beyond those in the OAuth 2.0 specification, based on a comprehensive threat model for the OAuth 2.0 protocol. This document is not an Internet Standards Track specification; it is published for informational purposes.",
  "authors": [
    "T. Lodderstedt",
    "M. McGloin",
    "P. Hunt"
  ],
  "organizations": [],
  "publication_date": "2013-01-01",
  "current_status": "INFORMATIONAL",
  "current_status_ru": "Информационный",
  "publication_status": "INFORMATIONAL",
  "publication_status_ru": "Информационный",
  "lifecycle": "informational",
  "lifecycle_ru": "Справочный",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "oauth",
  "source_draft": "draft-ietf-oauth-v2-threatmodel-08",
  "page_count": 71,
  "doi": "10.17487/RFC6819",
  "keywords": [
    "authorization",
    "authentication",
    "token",
    "counter-measures",
    "HTTP",
    "REST"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [
      "RFC9700"
    ],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc6819/",
    "html": "https://www.rfc-editor.org/rfc/rfc6819.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc6819.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc6819/"
  }
}