VersolaVersola/docs
versola.kzGitHub
RUEN

RFC 8707 — Resource Indicators

OAuth 2.0 Resource Indicators for Authorization Request

Specification: RFC 8707

Resource Indicators allow clients to specify which resource server(s) the access token will be used with, enabling audience-restricted tokens and improved security.

Authorization Request

  • resource parameter — specify target resource server(s) — not yet implemented
  • Multiple resource parameters — request access to multiple resources — not yet implemented

Token Response

  • aud claim in access token — contains requested resource(s) — not yet implemented
  • Audience validation — resource servers verify token audience — not yet implemented

Benefits

When implemented, resource indicators will provide:

  • Audience-restricted tokens (tokens valid only for specific resource servers)
  • Protection against token misuse across different APIs
  • Fine-grained access control per resource

Status

  • Not yet implemented — planned for future release