RFC9770 · Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework

{
  "id": "RFC9770",
  "number": 9770,
  "title_en": "Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document specifies a method of the Authentication and Authorization for Constrained Environments (ACE) framework, which allows an authorization server to notify clients and resource servers (i.e., registered devices) about revoked access tokens. As specified in this document, the method allows clients and resource servers (RSs) to access a Token Revocation List (TRL) on the authorization server by using the Constrained Application Protocol (CoAP), with the possible additional use of resource observation. Resulting (unsolicited) notifications of revoked access tokens complement alternative approaches such as token introspection, while not requiring additional endpoints on clients and RSs.",
  "authors": [
    "M. Tiloca",
    "F. Palombini",
    "S. Echeverria",
    "G. Lewis"
  ],
  "organizations": [],
  "publication_date": "2025-06-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "ace",
  "source_draft": "draft-ietf-ace-revoked-token-notification-09",
  "page_count": 64,
  "doi": "10.17487/RFC9770",
  "keywords": [
    "Security",
    "Access control",
    "Access rights",
    "Revocation",
    "CoAP",
    "IoT",
    "Constrained environments"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9770/",
    "html": "https://www.rfc-editor.org/rfc/rfc9770.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9770.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9770/"
  }
}