OAuth 2.0 Profiles
Prabath Siriwardena · Apress eBooks · 2014
OAuth 2.0 is a framework for delegated authorization. It doesn’t address all specific enterprise API security scenarios. The OAuth 2.0 profiles built on top of the core framework work to build a security ecosystem to make OAuth 2.0 ready for enterprise use cases. OAuth 2.0 introduced two extension points via grant types and token types. The profiles for OAuth 2.0 are built on top of this extensibility. This chapter talks about four key OAuth 2.0 profiles for token introspection, chained API invocation, dynamic client registration, and token revocation. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.