IETF OAuth · Protocol
Transaction Tokens
Short-lived tokens that carry the user, the workload and the authorization context of one request through a chain of services inside a trust domain, so each hop can verify what it is acting on.
CandidateWorking group last call completed 2026-08-21; awaiting shepherd write-up for the IESGCanonical documenttransaction-tokens
Revisions
Relations 2
Transaction Tokens builds on 1
- OAuth 2.0 Token ExchangepublishedA transaction token is minted by a token exchange style request to a transaction token service.Source
Transaction Tokens references 1
- JSON Web Token (JWT) Profile for OAuth 2.0 Access TokenspublishedTransaction tokens are JWTs and reuse the access token profile's claim conventions.Source
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.