Cross Domain · security identity
OAuth 2.0 Security Best Current Practice (RFC 9700)
The OAuth 2.0 Security Best Current Practice is the IETF’s consolidated, current security guidance for OAuth deployments. It refines and in places overrides the original RFC 6749 advice — most consequentially by recommending against the implicit grant and the resource owner password credentials grant, and by requiring PKCE for authorization code flows.
Also known as OAuth 2.0 Security Best Current Practice, RFC 9700.
Providers that carry OAuth 2.0 Security Best Current Practice 0
No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements OAuth 2.0 Security Best Current Practice and says so in its APIs.json profile appears here on the next build. Add or correct a listing.
Read from the API Evangelist standards directory. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.