8. References

8.1. Normative References

• [IANA.OAuth.Parameters] IANA, "OAuth Parameters", ````https://www.iana.org/assignments/oauth-parameters\````

• [IANA.well-known] IANA, "Well-Known URIs", ````https://www.iana.org/assignments/well-known-uris\````

• [JWK] Jones, M., "JSON Web Key (JWK)", RFC 7517, DOI 10.17487/RFC7517, May 2015, ````https://www.rfc-editor.org/info/rfc7517\````

• [JWS] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Signature (JWS)", RFC 7515, DOI 10.17487/RFC7515, May 2015, ````https://www.rfc-editor.org/info/rfc7515\````

• [JWT] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Token (JWT)", RFC 7519, DOI 10.17487/RFC7519, May 2015, ````https://www.rfc-editor.org/info/rfc7519\````

• [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, ````https://www.rfc-editor.org/info/rfc2119\````

• [RFC5785] Nottingham, M. and E. Hammer-Lahav, "Defining Well-Known Uniform Resource Identifiers (URIs)", RFC 5785, DOI 10.17487/RFC5785, April 2010, ````https://www.rfc-editor.org/info/rfc5785\````

• [RFC6125] Saint-Andre, P. and J. Hodges, "Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)", RFC 6125, DOI 10.17487/RFC6125, March 2011, ````https://www.rfc-editor.org/info/rfc6125\````

• [RFC6749] Hardt, D., Ed., "The OAuth 2.0 Authorization Framework", RFC 6749, DOI 10.17487/RFC6749, October 2012, ````https://www.rfc-editor.org/info/rfc6749\````

• [RFC7591] Richer, J., Ed., Jones, M., Bradley, J., Machulak, M., and P. Hunt, "OAuth 2.0 Dynamic Client Registration Protocol", RFC 7591, DOI 10.17487/RFC7591, July 2015, ````https://www.rfc-editor.org/info/rfc7591\````

• [RFC8126] Cotton, M., Leiba, B., and T. Narten, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 8126, DOI 10.17487/RFC8126, June 2017, ````https://www.rfc-editor.org/info/rfc8126\````

• [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, ````https://www.rfc-editor.org/info/rfc8174\````

• [RFC8259] Bray, T., Ed., "The JavaScript Object Notation (JSON) Data Interchange Format", STD 90, RFC 8259, DOI 10.17487/RFC8259, December 2017, ````https://www.rfc-editor.org/info/rfc8259\````

• [UNICODE] The Unicode Consortium, "The Unicode Standard", ````http://www.unicode.org/versions/latest/\````

• [USA15] Davis, M., Ed., Whistler, K., Ed., and M. Duerst, Ed., "Unicode Normalization Forms", Unicode Standard Annex 15, June 2017, ````http://www.unicode.org/reports/tr15/tr15-44.html\````

• [USASCII] American National Standards Institute, "Coded Character Set -- 7-bit American Standard Code for Information Interchange", ANSI X3.4, 1986

8.2. Informative References

• [JWE] Jones, M. and J. Hildebrand, "JSON Web Encryption (JWE)", RFC 7516, DOI 10.17487/RFC7516, May 2015, ````https://www.rfc-editor.org/info/rfc7516\````

• [MIX-UP] Jones, M., Bradley, J., and N. Sakimura, "OAuth 2.0 Mix-Up Mitigation", Work in Progress, draft-ietf-oauth-mix-up-mitigation-01, July 2016

• [OAuth.Post] Jones, M. and B. Campbell, "OAuth 2.0 Form Post Response Mode", April 2015, ````http://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html\````

• [OAuth.Responses] de Medeiros, B., Ed., Scurtescu, M., Tarjan, P., and M. Jones, "OAuth 2.0 Multiple Response Type Encoding Practices", February 2014, ````http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html\````

• [OpenID.Core] Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and C. Mortimore, "OpenID Connect Core 1.0", November 2014, ````http://openid.net/specs/openid-connect-core-1_0.html\````

• [OpenID.Discovery] Sakimura, N., Bradley, J., Jones, M., and E. Jay, "OpenID Connect Discovery 1.0", November 2014, ````http://openid.net/specs/openid-connect-discovery-1_0.html\````

• [OpenID.Registration] Sakimura, N., Bradley, J., and M. Jones, "OpenID Connect Dynamic Client Registration 1.0", November 2014, ````http://openid.net/specs/openid-connect-registration-1_0.html\````

• [RFC6819] Lodderstedt, T., Ed., McGloin, M., and P. Hunt, "OAuth 2.0 Threat Model and Security Considerations", RFC 6819, DOI 10.17487/RFC6819, January 2013, ````https://www.rfc-editor.org/info/rfc6819\````

• [RFC7009] Lodderstedt, T., Ed., Dronia, S., and M. Scurtescu, "OAuth 2.0 Token Revocation", RFC 7009, DOI 10.17487/RFC7009, August 2013, ````https://www.rfc-editor.org/info/rfc7009\````

• [RFC7033] Jones, P., Salgueiro, G., Jones, M., and J. Smarr, "WebFinger", RFC 7033, DOI 10.17487/RFC7033, September 2013, ````https://www.rfc-editor.org/info/rfc7033\````

• [RFC7636] Sakimura, N., Ed., Bradley, J., and N. Agarwal, "Proof Key for Code Exchange by OAuth Public Clients", RFC 7636, DOI 10.17487/RFC7636, September 2015, ````https://www.rfc-editor.org/info/rfc7636\````

• [RFC7662] Richer, J., Ed., "OAuth 2.0 Token Introspection", RFC 7662, DOI 10.17487/RFC7662, October 2015, ````https://www.rfc-editor.org/info/rfc7662\````