The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf. This document is the base specification of OAuth 2.0. This document is an officially published standard.
Full text: https://tools.ietf.org/html/rfc6749
This document deprecates a number of OAuth features. The OAuch tests related to these deprecated features are:
This document introduces a number of security countermeasures for OAuth. The OAuch tests related to these countermeasures are:
Back to the documents overview