Standards reference
The specifications behind the concepts.
This collection will grow alongside the lessons, connecting each idea to the standard that defines it.
Starting points
RFC 6749
The OAuth 2.0 Authorization Framework
The foundational OAuth 2.0 specification.
RFC 9700Best Current Practice for OAuth 2.0 Security
Security guidance to read alongside the original framework.
OPENID FOUNDATIONOpenID Connect Core 1.0
The core specification for authentication built on OAuth 2.0.
A starting point, not the whole story
OAuth spans a family of specifications. This initial reading list is not a complete implementation guide. As the curriculum develops, each topic will link to the relevant requirements, extensions, and current guidance.
BACK TO LEARNThe learning overview