2024-03-21 2025-04-25 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty access_token object RFC9635, Section 2.1.1 access_token array of objects RFC9635, Section 2.1.2 subject object RFC9635, Section 2.2 client object RFC9635, Section 2.3 client string RFC9635, Section 2.3.1 user object RFC9635, Section 2.4 user string RFC9635, Section 2.4.1 interact object RFC9635, Section 2.5 interact_ref string RFC9635, Section 5.1 existing_access_token string RFC9767, Section 4 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty bearer Request, Response RFC9635, Sections 2.1.1 and 3.2.1 durable Response RFC9635, Section 3.2.1 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty sub_id_formats array of strings RFC9635, Section 2.2 assertion_formats array of strings RFC9635, Section 2.2 sub_ids array of objects RFC9635, Section 2.2 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty id_token RFC9635, Section 3.4.1 saml2 RFC9635, Section 3.4.1 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty key object RFC9635, Section 7.1 key string RFC9635, Section 7.1.1 class_id string RFC9635, Section 2.3 display object RFC9635, Section 2.3.2 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty name string RFC9635, Section 2.3.2 uri string RFC9635, Section 2.3.2 logo_uri string RFC9635, Section 2.3.2 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty redirect string RFC9635, Section 2.5.1.1 app string RFC9635, Section 2.5.1.2 user_code string RFC9635, Section 2.5.1.3 user_code_uri string RFC9635, Section 2.5.1.4 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty redirect RFC9635, Section 2.5.2.1 push RFC9635, Section 2.5.2.2 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty ui_locales RFC9635, Section 2.5.3 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty continue object RFC9635, Section 3.1 access_token object RFC9635, Section 3.2.1 access_token array of objects RFC9635, Section 3.2.2 interact object RFC9635, Section 3.3 subject object RFC9635, Section 3.4 instance_id string RFC9635, Section 3.5 error object RFC9635, Section 3.6 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty redirect RFC9635, Section 3.3 app RFC9635, Section 3.3 user_code RFC9635, Section 3.3 user_code_uri RFC9635, Section 3.3 finish RFC9635, Section 3.3 expires_in RFC9635, Section 3.3 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty sub_ids array of objects RFC9635, Section 3.4 assertions array of objects RFC9635, Section 3.4 updated_at string RFC9635, Section 3.4 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty invalid_request RFC9635, Section 3.6 invalid_client RFC9635, Section 3.6 invalid_interaction RFC9635, Section 3.6 invalid_flag RFC9635, Section 3.6 invalid_rotation RFC9635, Section 3.6 key_rotation_not_supported RFC9635, Section 3.6 invalid_continuation RFC9635, Section 3.6 user_denied RFC9635, Section 3.6 request_denied RFC9635, Section 3.6 unknown_interaction RFC9635, Section 3.6 unknown_user RFC9635, Section 3.6 too_fast RFC9635, Section 3.6 too_many_attempts RFC9635, Section 3.6 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty httpsig string RFC9635, Section 7.3.1 httpsig object RFC9635, Section 7.3.1 mtls string RFC9635, Section 7.3.2 jwsd string RFC9635, Section 7.3.3 jws string RFC9635, Section 7.3.4 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty jwk RFC9635, Section 7.1 cert RFC9635, Section 7.1 cert#S256 RFC9635, Section 7.1 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty grant_request_endpoint string RFC9635, Section 9 interaction_start_modes_supported array of strings RFC9635, Section 9 interaction_finish_methods_supported array of strings RFC9635, Section 9 key_proofs_supported array of strings RFC9635, Section 9 sub_id_formats_supported array of strings RFC9635, Section 9 assertion_formats_supported array of strings RFC9635, Section 9 key_rotation_supported boolean RFC9635, Section 9 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty jwt-signed Active JSON Web Token, signed with JWS jwt-encrypted Active JSON Web Token, encrypted with JWE macaroon Active Macaroon MACAROON biscuit Active Biscuit BISCUIT zcap Active ZCAP ZCAPLD Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty access_token string RFC9767, Section 3.3 proof string RFC9767, Section 3.3 resource_server object/string RFC9767, Section 3.3 access array of strings/objects RFC9767, Section 3.3 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty active boolean RFC9767, Section 3.3 access array of strings/objects RFC9767, Section 3.3 key object/string RFC9767, Section 3.3 flags array of strings RFC9767, Section 3.3 exp integer RFC9767, Section 3.3 iat integer RFC9767, Section 3.3 nbf integer RFC9767, Section 3.3 aud string or array of strings RFC9767, Section 3.3 sub string RFC9767, Section 3.3 iss string RFC9767, Section 3.3 instance_id string RFC9767, Section 3.3 Expert Review Justin Richer, Joseph Salowey, Sudesha Shetty access array of strings/objects RFC9767, Section 3.4 resource_server object/string RFC9767, Section 3.4 token_formats_supported array of strings RFC9767, Section 3.4 token_introspection_required boolean RFC9767, Section 3.4 Expert Review Justin Richer, Joseph Salowey, Sudesha Shetty resource_reference string RFC9767, Section 3.4 instance_id string RFC9767, Section 3.4 introspection_endpoint string RFC9767, Section 3.4 Expert Review Justin Richer, Joseph Salowey, Sudesha Shetty introspection_endpoint string RFC9767, Section 3.1 token_formats_supported array of strings RFC9767, Section 3.1 resource_registration_endpoint string RFC9767, Section 3.1 grant_request_endpoint string RFC9767, Section 3.1 key_proofs_supported array of strings RFC9767, Section 3.1 Specification Required Justin Richer, Joseph Salowey, Sudesha Shetty invalid_request RFC9767, Section 3.5 invalid_resource_server RFC9767, Section 3.5 invalid_access RFC9767, Section 3.5