Documents by T. Lodderstedt
2013, RFC6819: OAuth 2.0 Threat Model and Security Considerations
2013, RFC7009: OAuth 2.0 Token Revocation
2021, RFC9126: OAuth 2.0 Pushed Authorization Requests
2023, RFC9396: OAuth 2.0 Rich Authorization Requests
2023, RFC9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)