Internet-Draft draft-li-oauth-policy-based-anonymous-tokens-00.txt is now
available.
Title: OAuth 2.0 Policy-Based Anonymous Access Tokens
Authors: David Kretzler
Yong Li
Jian Wang
Antoine Fressancourt
Name: draft-li-oauth-policy-based-anonymous-tokens-00.txt
Pages: 43
Dates: 2026-08-26
Abstract:
This document specifies an OAuth 2.0 access-token type that allows a
client, after one authorization-server issuance, to derive a policy-
bounded set of unlinkable, single-use access tokens locally. Each
derived token is bound to one canonical tag, an intended resource
server, approved authorization details, a policy epoch, and a
validity interval. Resource servers validate the token offline and
enforce both policy membership and replay prevention.
The protocol defines authorization request semantics, token-endpoint
issuance, canonical policy and metadata objects, token derivation and
HTTP presentation, resource-server validation, capability discovery,
error handling, and IANA registrations. Version 1 requires public
verification and the counter-window policy profile. It supports an
optional private metadata bit, while private-verification
ciphersuites remain optional.
Concrete cryptographic algorithms are supplied by separately
registered PBAT ciphersuites. The initial mandatory-to-implement
ciphersuite is the publicly-verifiable equivalence-class-signature
construction over BLS12-381 specified by the companion PBAT
ciphersuite document. This specification does not replace OAuth
grants, resource-owner consent, client authentication, or audience
restriction.
— middle
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-li-oauth-policy-based-anonymous-tokens/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-li-oauth-policy-based-anonymous-tokens-00.html
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.