Skip to main content

RFC 8252 - OAuth 2.0 for Native Apps

  • Status: Best Current Practice
  • Published: October 2017
  • Stream: IETF
  • Updates: RFC6749
  • Errata: No Errata

Abstract​

OAuth 2.0 authorization requests from native apps should only be made through external user-agents, primarily the user's browser. This specification details the security and usability reasons why this is the case and how native apps and authorization servers can implement this best practice.

Status of This Memo​

This memo documents an Internet Best Current Practice.

This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG).

Table of Contents​

Appendices​