oauth2-standard
Installation
SKILL.md
OAuth 2.0 Standard (RFC 6749)
Standard to follow when implementing or reviewing OAuth 2.0 authentication flows per RFC 6749.
Roles
| Role | Description |
|---|---|
| resource owner | Entity that can grant access to a protected resource (end-user) |
| resource server | Server hosting protected resources and accepting requests with access tokens |
| client | Application that requests protected resources on behalf of the resource owner with their authorization |
| authorization server | Server that issues access tokens to the client after authenticating the resource owner |
Protocol Endpoints
- Authorization endpoint: URI where the client redirects the user-agent to obtain authorization from the resource owner. GET required; POST optional.
- Token endpoint: URI where the client exchanges an authorization grant or refresh token for an access token. POST required.
- Redirection endpoint: Client-registered URI where the authorization server returns the authorization result (code or token) to the client.