Search RFCs

RFC Editor

File formats:

Also available:XML file for editing

 

Status:

BEST CURRENT PRACTICE

Updates:

RFC 7519

Authors:

Y. Sheffer
D. Hardt
M. Jones

Stream:

IETF

Source:

oauth (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC8725

Discuss this RFC: Send questions or comments to the mailing listoauth@ietf.org

Other actions:Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 8725

Abstract

JSON Web Tokens, also known as JWTs, are URL-safe JSON-based securitytokens that contain a set of claims that can be signed and/orencrypted. JWTs are being widely used and deployed as a simplesecurity token format in numerous protocols and applications, both inthe area of digital identity and in other application areas. ThisBest Current Practices document updates RFC 7519 to provideactionable guidance leading to secure implementation and deploymentof JWTs.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.