RFC 9701: JSON Web Token (JWT) Response for OAuth Token Introspection

This specification proposes an additional response secured by JSON Web Token (JWT) for OAuth 2.0 Token Introspection.

Read RFC 9701 on the RFC Editor

Outgoing relationships (13 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 6838: Media Type Specifications and Registration Procedures
Normative reference — RFC 7519: JSON Web Token (JWT)
Normative reference — RFC 7515: JSON Web Signature (JWS)
Normative reference — RFC 7518: JSON Web Algorithms (JWA)
Normative reference — RFC 7516: JSON Web Encryption (JWE)
Normative reference — RFC 8414: OAuth 2.0 Authorization Server Metadata
Normative reference — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 7662: OAuth 2.0 Token Introspection
Normative reference — RFC 7591: OAuth 2.0 Dynamic Client Registration Protocol
Normative reference — RFC 8725: JSON Web Token Best Current Practices
Normative reference — RFC 9700: Best Current Practice for OAuth 2.0 Security