Very nice article with a fair bit of info. Shows how nice OAuth 2.0 can be. The "OAuth 2.0 Protected Resource Metadata" protocol[1] mentioned to enable auth-bo

Very nice article with a fair bit of info. Shows how nice OAuth 2.0 can be. The "OAuth 2.0 Protected Resource Metadata" protocol[1] mentioned to enable auth-bootstrapping clients looks like a nice evolution of the ecosystem. The "Identity Assertion Authorization Grant" at the end[2] was a nice bonus. [1]: https://datatracker.ietf.org/doc/draft-ietf-oauth-resource-metadata/ https://datatracker.ietf.org/doc/draft-ietf-oauth-resource-m... [2]: https://datatracker.ietf.org/doc/draft-parecki-oauth-identity-assertion-authz-grant/ https://datatracker.ietf.org/doc/draft-parecki-oauth-identit...