Specifies authorization extensions to the Transport Layer Security (TLS) Handshake Protocol for exchanging authorization information such as attribute certificates or SAML assertions.
RFC 6749 defines the complete specification of the OAuth 2.0 authorization framework, including four authorization grant types - authorization code, implicit, resource owner password credentials, and client credentials. This is the foundational standard for modern API security and authentication.
Published: May 2023