⌕ Поиск по атласу

IETF · RFC · RFC8705

RFC8705 · OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens

OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens

This document describes OAuth client authentication and certificate-bound access and refresh tokens using mutual Transport Layer Security (TLS) authentication with X.509 certificates. OAuth clients are provided a mechanism for authentication to the authorization server using mutual TLS, based on either self-signed certificates or public key infrastructure (PKI). OAuth authorization servers are provided a mechanism for binding access tokens to a client's mutual-TLS certificate, and OAuth protected resources are provided a method for ensuring that such an access token presented to it was issued to the client presenting the token.

Официальная английская аннотация

This document describes OAuth client authentication and certificate-bound access and refresh tokens using mutual Transport Layer Security (TLS) authentication with X.509 certificates. OAuth clients are provided a mechanism for authentication to the authorization server using mutual TLS, based on either self-signed certificates or public key infrastructure (PKI). OAuth authorization servers are provided a mechanism for binding access tokens to a client's mutual-TLS certificate, and OAuth protected resources are provided a method for ensuring that such an access token presented to it was issued to the client presenting the token.

Связи документа

Официальный источник · 2020-02-01

Полные импортированные сведения карточки
{
  "id": "RFC8705",
  "number": 8705,
  "title_en": "OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes OAuth client authentication and certificate-bound access and refresh tokens using mutual Transport Layer Security (TLS) authentication with X.509 certificates. OAuth clients are provided a mechanism for authentication to the authorization server using mutual TLS, based on either self-signed certificates or public key infrastructure (PKI). OAuth authorization servers are provided a mechanism for binding access tokens to a client's mutual-TLS certificate, and OAuth protected resources are provided a method for ensuring that such an access token presented to it was issued to the client presenting the token.",
  "authors": [
    "B. Campbell",
    "J. Bradley",
    "N. Sakimura",
    "T. Lodderstedt"
  ],
  "organizations": [],
  "publication_date": "2020-02-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "oauth",
  "source_draft": "draft-ietf-oauth-mtls-17",
  "page_count": 24,
  "doi": "10.17487/RFC8705",
  "keywords": [
    "JSON Web Token",
    "JWT",
    "MTLS",
    "Mutual TLS",
    "proof-of-possession",
    "proof-of-possession access token",
    "key confirmed access token",
    "certificate-bound access token",
    "client certificate",
    "X.509 Client Certificate Authentication",
    "key confirmation",
    "confirmation method",
    "holder-of-key",
    "OAuth"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc8705/",
    "html": "https://www.rfc-editor.org/rfc/rfc8705.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc8705.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc8705/"
  }
}