OAuth 2.0

Client and server-side code examples using the SDK.

Core:

• Authorisation request
• Token request
• Protected resource request
• Access token introspection

Extensions:

• Client registration
• Proof Key for Code Exchange (PKCE)
• DPoP sender-constrained access tokens
• JWT-secured authorisation request (JAR)
• JWT-secured authorisation responses (JARM)
• Rich authorisation requests (RAR)
• Token exchange
• Request object endpoint (JAR, FAPI), obsoleted by PAR

Extras:

• Redirect URI validation