-
refresh_token datatracker.ietf.org
OAuth 2.0 Refresh Token Grant Type used to exchange a refresh token against a short life access token and sometime a new refresh token as well.
-
password datatracker.ietf.org
OAuth 2.0 Resource Owner Password Credentials Grant Type which is not recommended to use anymore.
-
implicit datatracker.ietf.org
OAuth 2.0 Implicit Grant Type which is deprecated and should not be used anymore.
-
client_credentials datatracker.ietf.org
OAuth 2.0 Client Credentials Grant providing a way to get token without user interaction which fit well machine to machine communications.
-
authorization_code datatracker.ietf.org
OAuth 2.0 Authorization Code Grant Type which fit well public client authorization like web apps.
-
The OAuth 2.0 Authorization Framework datatracker.ietf.org
Underlying OAuth 2.0 protocol OpenID Connect is based on.
-
OpenID Connect Standard Claims Registration for CBOR Web Tokens datatracker.ietf.org
Defines how to represent the OpenID Connect standard claims in CBOR Web Tokens (CWTs).
-
OAuth 2.1 datatracker.ietf.org
Consolidation of OAuth 2.0 specifications into a single document, removing deprecated features and clarifying best practices.
-
Selective Disclosure for JWTs (SD-JWT) datatracker.ietf.org
Specification for selective disclosure of JWT elements.
-
OAuth Identity and Authorization Chaining Across Domains datatracker.ietf.org
Preserves user identity, authorization context, and call-chain history across multiple services and trust domains using OAuth token exchange and JWT-based assertions.
-
Cross-App Access (XAA), formally known as the "Identity Assertion Authorization Grant" datatracker.ietf.org
Enables AI agents and apps to securely access and act across multiple services with user consent using standardized and fine-grained OAuth permissions.
-
OAuth 2.0 for First-Party Applications datatracker.ietf.org
Defines the Authorization Challenge Endpoint to enable native applications to obtain user authorization through native user interfaces.
-
OAuth Client ID Metadata Document datatracker.ietf.org
Mechanism through which an OAuth client can identify itself to authorization servers, without prior dynamic client registration or other existing registration.
-
OAuth 2.0 for Browser-Based Apps datatracker.ietf.org
Security and usability best practice for OAuth usage in Browser-based apps.
-
OAuth 2.0 Attestation-Based Client Authentication datatracker.ietf.org
Extension to OAuth 2.0 enabling public clients to authenticate using key-bound attestations.
-
CyberArk Identity cyberark.com
Identity security solution that provides OpenID Connect Provider capabilities.
-
Curity Resources curity.io
Curity solution resources articles about OpenID Connect.
-
Curity Identity Server curity.io
API Security solution that brings identity and API access management together.
-
Connect2id connect2id.com
OpenID Connect SSO and IdP server for enterprise.
-
Cloudentity cloudentity.com
Cloud Identity and Authorization Platform with FAPI and eKYC support.
-
CerberAuth cerberauth.com
A blog talking about OpenID Connect and OAuth 2.0.
-
SiteMinder broadcom.com
An IAM provided by Broadcom with OpenID Connect Provider support.
-
ByteByteGo blog.bytebytego.com
Oauth 2.0 explains using visual and simple terms.
-
Authlete authlete.com
Set of APIs for developers to implement OAuth authorization servers and OpenID Connect identity providers.
-
Authelia authelia.com
Open Source authentication, authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing single sign-on (SSO).
-
Auth0 auth0.com
OpenID Connect and OAuth 2.0 service that is available on the cloud as a SaaS.
-
OpenID Connect for Agents (OIDC-A) 1.0 arxiv.org
A research proposal (not a standard or IETF draft) extending OpenID Connect to support AI agent identity, attestation, delegation chains, and fine-grained authorization within the OAuth ecosystem.
-
Apache APISIX openid-connect apisix.apache.org
OpenID Connect Relying Party plugin for the Apache APISIX API Gateway.
-
-
2018 - OAuth 2.0 Simplified by Aaron Parecki amazon.com
-
-
-
Alibaba Cloud IDaaS alibabacloud.com
Alibaba Cloud OpenID Connect Provider as a service.
-
Alex Bilbie alexbilbie.github.io
Blog posts about OAuth 2.0 topic.
-
Aaron Parecki aaronparecki.com
OAuth WG Member blog posts about OAuth 2.0.
-
OAuth for Model Context Protocol aaronparecki.com
Aaron Parecki article about how OAuth works and how it should be used in the context of model context protocol (MCP) server.
-
ZScaler zscaler.com
Securing Digital India Against AI Cyber Threats (2026) - Examines the escalating risks facing population scale digital infrastructure and artificial intelligence platforms across critical sectors in India. Key findings highlight that 100% of surveyed organizations must…
-
Zscaler zscaler.com
AI Security Report (2026) - Examines the explosive growth of artificial intelligence and machine learning adoption within enterprise environments through a comprehensive evaluation of telemetry data. Key findings reveal that global transaction volumes surged by 83 percent…
-
ZScaler zscaler.com
Threatlabz Ransomware Report (2025) - Examines the current ransomware landscape, detailing top trends, targets, and evolving attack methodologies. Key findings reveal a 145.9% surge in blocked ransomware attempts and a 92.7% increase in data exfiltration, signaling a broader…
-
Zscaler zscaler.com
Threatlabz AI Security ANZ Executive Perspective (2026) - Investigates the rapid integration of artificial intelligence across Australian and New Zealand organizations and the resulting expansion of the enterprise attack surface. Red team testing reveals that all evaluated…
-
Zscaler zscaler.com
VPN Risk Report (2026) - Examines the security risks of enterprise virtual private network infrastructure through a survey of 822 information technology and cybersecurity professionals. Key findings reveal that 61 percent of organizations experienced confirmed or suspected…
-
Yubico yubico.com
Global State Of Authentication Report (2025) - Analyzes global authentication habits and the persistent perception-reality gap between employee security beliefs and modern cyber vulnerabilities. Key findings from the survey of 18,000 employed adults reveal that 40% of employees…
-
VulnCheck wwv.vulncheck.com
Exploit Intelligence Report (2026) - Analyzes the 2025 vulnerability and exploit landscape to provide actionable intelligence on threat actor behavior and the evolving exploit ecosystem. Key findings reveal that while only one percent of disclosed vulnerabilities were exploited…
-
Wiz wiz.io
State of AI in the Cloud (2025) - Analyzes the current state of AI in cloud environments, focusing on adoption rates, security challenges, and governance issues. Key findings reveal DeepSeek's rapid growth and the continued dominance of OpenAI, alongside a rising trend of…
-
Wiz wiz.io
State of Code Security (2025) - Examines the security posture of code repositories and CI/CD pipelines, highlighting the deep connection between code and cloud environments. It reveals that 61% of organizations have secrets exposed in public repositories , with GitHub…
-
Wiz wiz.io
Cloud Data Security Snapshot (2025) - Analyzes current cloud data security exposure trends. A significant finding reveals that 54% of cloud environments have exposed assets containing sensitive data, highlighting the critical need for improved access controls and vulnerability…
-
Wiz wiz.io
CISO Budget Survey Report (2026) - Analyzes the 2026 CISO Budget Benchmark survey, highlighting current spending trends and priorities in cybersecurity. Key findings reveal that while budgets are increasing, 56% of professionals believe they are insufficient, with cloud…
-
Wiz wiz.io
AI Security Readiness (2025) - Analyzes the current state of AI security readiness among cloud architects, engineers, and security leaders, highlighting critical gaps. Key findings reveal widespread AI adoption is significantly outpacing the development of in-house security…
-
With Secure withsecure.com
Supply Chain Threat Report (2025) - Analyzes the increasing threat of supply chain attacks, highlighting their impact and the factors contributing to their rise. The report details notable incidents like the 3CX compromise and the MOVEit Transfer vulnerability, emphasizing the…
-
With Secure withsecure.com
Ransomware Threat Report (2025) - Analyzes the evolving ransomware threat landscape, highlighting trends and developments from 2021. The report indicates a decrease in new ransomware families but emphasizes ransomware's continued prevalence, accounting for nearly one-fifth of…
- next page of items loading…
