Skip to content

Latest commit

 

History

History
113 lines (69 loc) · 8.8 KB

README.md

File metadata and controls

113 lines (69 loc) · 8.8 KB
Raw

OAuth & OpenID Link List

A list of selected specifications in the OAuth & OpenID spaces and where to find them.

Abbreviations/key:
  • ImD: Implementer's Draft (OIDF, provides IPR protection to the Implementers)
  • WG: Working Group Draft
  • InD: Individual Draft
  • ED: Editor's Copy (version that reflects the most recent changes since the last WG draft)
  • Git: Git Repository of the specification

* marks a status that is not yet official, under discussion, or proposed.

To propose an addition/modification, please send a pull request against the data.yml file in the source branch.

Verifiable Credentials (VC)

Credential Formats & Related Specifications

Name Description Working Group Status Links
SD-JWT Selective Disclosure for JWTs IETF OAuth Working Group Draft WD ED Git
SD-JWT VC Verifiable Credentials with SD-JWT IETF OAuth Working Group Draft WD ED Git
JWT and CWT Status List Status list mechanism for JWT and CWT credentials IETF OAuth* Individual Draft ED InD

Credential Issuance and Presentation

Name Description Working Group Status Links
OpenID for Verifiable Presentations OAuth 2.0-based mechanism for presentation of VCs OpenID Connect 2nd Implementer's Draft ImD WD ED Git
OpenID for VC Issuance OAuth 2.0-based authorization for VC issuance OpenID Connect Working Group Draft WD ED Git
Self-Issued OpenID Provider v2 (SIOPv2) Enables End-Users to use OpenID Providers (OPs) that they control OpenID Connect 1st Implementer's Draft WD ED Git
OpenID for Verifiable Presentations over BLE Using BLE for requesting the presentation of VCs OpenID Connect Working Group Draft WD ED Git
OpenID Connect UserInfo Verifiable Credentials UserInfo endpoint responses with Verifiable Credentials OpenID Connect Working Group Draft WD ED Git
Security & Trust Structured Security Analysis OpenID Connect* Early Draft ED Git
OAuth 2.0 Attestation-Based Client Authentication IETF OAuth WG Working Group Draft ED Git

Profiles

Name Description Working Group Status Links
OpenID4VC High Assurance Interoperability Profile with SD-JWT VC TBD Draft ED Git

Related

Name Description Working Group Status Links
DIF Presentation Exchange DIF Draft ED Git

eKYC & Identity Assurance

Main

Name Description Working Group Status Links
OpenID Connect for Identity Assurance 1.0 OpenID eKYC & IDA Implementer's Draft 4 ImD WD ED Git
OpenID Connect Authority claims extension OpenID eKYC & IDA Implementer's Draft 1 ED Git
OpenID Connect Advanced Syntax for Claims (ASC) Syntax extensions for OIDC claim requests OpenID eKYC & IDA Working Group Draft ED Git

OpenID FAPI 2.0

Name Description Working Group Status Links
FAPI 2.0 Attacker Model OpenID FAPI Implementer's Draft 2 ImD ED Git
FAPI 2.0 Security Profile OpenID FAPI Implementer's Draft 2 ImD ED Git
FAPI 2.0 Message Signing OpenID FAPI Working Group Draft ED Git

RFC6749 OAuth & Related

Main

Name Description Working Group Status Links
OAuth 2.0 IETF OAuth RFC6749 RFC Git

BCPs

Name Description Working Group Status Links
Cross-Device Flows: Security Best Current Practice describes threats against cross-device flows and mitigations IETF OAuth Working Group Draft WG ED Git
OAuth 2.0 Security Best Current Practice describes security threats against OAuth 2.0 deployments and mitigations IETF OAuth Working Group Draft WG ED Git

Other Drafts