ISO/IEC 26138:2024
Information technology — OpenID connect — OAuth 2.0 multiple response type encoding practices
This document provides guidance on the proper encoding of responses to OAuth 2.0 Authorization Requests in which the request uses a Response Type value that includes space characters. Furthermore, this document registers several new Response Type values in the OAuth Authorization Endpoint Response Types registry.
This document also defines a Response Mode Authorization Request parameter that informs the Authorization Server of the mechanism to be used for returning Authorization Response parameters from the Authorization Endpoint.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$118.26 NZD
|
|
| HardCopy |
$152.17 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Abstract
Table of Contents
1. Introduction
1.1. Requirements Notation and Conventions
1.2. Terminology
2. Response Types and Response Modes
2.1. Response Modes
2.2. Multiple-Valued Response Types
3. ID Token Response Type
4. None Response Type
5. Definitions of Multiple-Valued Response Type Combinations
6. IANA Considerations
6.1. OAuth Authorization Endpoint Response Types Registration
6.1.1. Registry Contents
6.2. OAuth Parameters Registration
6.2.1. Registry Contents
7. Security Considerations
8. References
8.1. Normative References
8.2. Informative References
Appendix A. Example using Multiple-Valued Response Type
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS ISO/IEC 27001:2023
Information security, cybersecurity and privacy protection – Information security management systems – Requirements
-
AS/NZS ISO/IEC 27001:2023 A1
Information security, cybersecurity and privacy protection - Privacy enhancing data de-identification framework
-
AS/NZS ISO/IEC 27002:2022
Information security, cybersecurity and privacy protection — Information security controls
-
AS/NZS ISO/IEC 27036.2:2024
Cybersecurity - Supplier relationships, Part 2: Requirements
Foreword
Abstract
Table of Contents
1. Introduction
1.1. Requirements Notation and Conventions
1.2. Terminology
2. Response Types and Response Modes
2.1. Response Modes
2.2. Multiple-Valued Response Types
3. ID Token Response Type
4. None Response Type
5. Definitions of Multiple-Valued Response Type Combinations
6. IANA Considerations
6.1. OAuth Authorization Endpoint Response Types Registration
6.1.1. Registry Contents
6.2. OAuth Parameters Registration
6.2.1. Registry Contents
7. Security Considerations
8. References
8.1. Normative References
8.2. Informative References
Appendix A. Example using Multiple-Valued Response Type