RFC 9470: OAuth 2.0 Step Up Authentication Challenge Protocol

It is not uncommon for resource servers to require different authentication strengths or recentness according to the characteristics of a request. This…

Read RFC 9470 on the RFC Editor

Outgoing relationships (9 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 6749: The OAuth 2.0 Authorization Framework
Normative reference — RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
Informative reference — RFC 9110: HTTP Semantics
Informative reference — RFC 7519: JSON Web Token (JWT)
Informative reference — RFC 8414: OAuth 2.0 Authorization Server Metadata
Informative reference — RFC 7662: OAuth 2.0 Token Introspection
Informative reference — RFC 9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

Incoming relationships (1 related RFC)

Informatively referenced by — RFC 9728: OAuth 2.0 Protected Resource Metadata