Specifications

Guide on specifications. You don’t have to read this section if you are just using Authlib. But it would be good for you to understand how Authlib works.

• RFC5849: The OAuth 1.0 Protocol
• RFC6749: The OAuth 2.0 Authorization Framework
• RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
• RFC7009: OAuth 2.0 Token Revocation
• RFC7515: JSON Web Signature
• RFC7516: JSON Web Encryption
• RFC7517: JSON Web Key
• RFC7518: JSON Web Algorithms
• RFC7519: JSON Web Token
• RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants
• RFC7591: OAuth 2.0 Dynamic Client Registration Protocol
• RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol
• RFC7636: Proof Key for Code Exchange by OAuth Public Clients
• RFC7638: JSON Web Key (JWK) Thumbprint
• RFC7662: OAuth 2.0 Token Introspection
• RFC8037: CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)
• RFC8414: OAuth 2.0 Authorization Server Metadata
• RFC8628: OAuth 2.0 Device Authorization Grant
• OpenID Connect 1.0