One post tagged with "OAuth"

RFC 8693 — OAuth 2.0 Token Exchange (2020) standardises "trade this token for a different token". It's the protocol that quietly underwrites most modern service-to-service authentication, identity-provider bridging, and on-behalf-of delegation.

This post is the working notebook: what the spec actually says, how the moving parts connect, and where the design decisions matter in production.