HTTP registry: OAuth

Registered value from the IANA HTTP registry.

Authentication registry values define how a client proves identity or possession of credentials to an origin or proxy. OAuth is registered in HTTP Authentication Schemes. Defining reference: RFC5849, Section 3.5.1.

httpregistryhttp-authschemesauthschemes

Identifier (http)

OAuth

Registered value from the IANA HTTP registry.

Use TLS, validate issuer/audience or challenge parameters, scope credentials to the correct hop, and design expiry, rotation, and replay handling explicitly.

This registry value is currently marked active by IANA. Follow the defining specification before sending, accepting, or proxying it.

IANA registry: http-authschemes/authschemes

Registry reference: RFC5849, Section 3.5.1

Sources

HTTP Authentication Schemes
RFC5849, Section 3.5.1