Auth Playground

OAuth 2.0 Demonstration Client

idp.iam.mozilla.com

OpenID Provider • playground • specs

Server Specifications

Supported specifications (18)

fapi_1_baseline: FAPI 1.0 Baseline
json_web_key: RFC 7517 - JSON Web Key (JWK)
json_web_signature: RFC 7515 - JSON Web Signature (JWS)
json_web_token: RFC 7519 - JSON Web Token (JWT)
oauth_2_authorization_framework: RFC 6749 - OAuth 2.0 Authorization Framework
oauth_2_authorization_server_metadata: RFC 8414 - OAuth 2.0 Authorization Server Metadata
oauth_2_bearer_token_usage: RFC 6750 - OAuth 2.0 Bearer Token Usage
oauth_2_device_authorization_grant: RFC 8628 - Device Authorization Grant
oauth_2_dpop: RFC 9449 - Demonstrating Proof of Possession (DPoP)
oauth_2_form_post_response_mode: OAuth 2.0 Form Post Response Mode
oauth_2_multiple_response_types: OAuth 2.0 Multiple Response Types
oauth_2_pkce: RFC 7636 - PKCE
oauth_2_token_revocation: RFC 7009 - OAuth 2.0 Token Revocation
oidc_backchannel_logout: OpenID Connect Back-Channel Logout 1.0
oidc_ciba: OpenID Connect CIBA
oidc_core: OpenID Connect Core 1.0
oidc_discovery: OpenID Connect Discovery 1.0
oidc_rpinitiated_logout: OpenID Connect RP-Initiated Logout 1.0

Unsupported specifications (19)

fapi_1_advanced: FAPI 1.0 Advanced
oauth_2_authorization_server_issuer_identification: RFC 9207 - Authorization Server Issuer Identification
oauth_2_dynamic_client_registration: RFC 7591 - OAuth 2.0 Dynamic Client Registration
oauth_2_dynamic_client_registration_management: RFC 7592 - OAuth 2.0 Dynamic Client Registration Management
oauth_2_jarm: JWT Secured Authorization Response Mode (JARM)
oauth_2_jwt_secured_authorization_request: RFC 9101 - JWT-Secured Authorization Request (JAR)
oauth_2_mtls: RFC 8705 - OAuth 2.0 Mutual-TLS
oauth_2_native_apps: RFC 8252 - OAuth 2.0 for Native Apps
oauth_2_pushed_authorization_requests: RFC 9126 - Pushed Authorization Requests (PAR)
oauth_2_resource_indicators: RFC 8707 - Resource Indicators for OAuth 2.0
oauth_2_rich_authorization_requests: RFC 9396 - Rich Authorization Requests (RAR)
oauth_2_step_up_authentication_challenge: RFC 9470 - Step Up Authentication Challenge
oauth_2_token_introspection: RFC 7662 - OAuth 2.0 Token Introspection
oidc_frontchannel_logout: OpenID Connect Front-Channel Logout 1.0
oidc_prompt_create: OpenID Connect Prompt Create 1.0
oidc_registration: OpenID Connect Dynamic Registration 1.0
oidc_session_management: OpenID Connect Session Management 1.0
openid_for_verifiable_credential_issuance: OpenID for Verifiable Credential Issuance
openid_for_verifiable_presentations: OpenID for Verifiable Presentations

Unknown specifications (14)

ietf_urn_sub_namespace_oauth: RFC 6755 - IETF URN Sub-Namespace for OAuth
json_web_algorithms: RFC 7518 - JSON Web Algorithms (JWA)
json_web_encryption: RFC 7516 - JSON Web Encryption (JWE)
jwk_thumbprint_uri: RFC 9278 - JWK Thumbprint URI
jwt_best_current_practices: RFC 8725 - JWT Best Current Practices
jwt_proof_of_possession: RFC 7800 - Proof-of-Possession Key Semantics for JWTs
oauth_2_assertion_framework: RFC 7521 - Assertion Framework for OAuth 2.0
oauth_2_jwt_access_tokens: RFC 9068 - JWT Profile for OAuth 2.0 Access Tokens
oauth_2_jwt_introspection_response: RFC 9701 - JWT Response for OAuth Token Introspection
oauth_2_jwt_profile: RFC 7523 - JWT Profile for OAuth 2.0
oauth_2_saml_profile: RFC 7522 - SAML 2.0 Profile for OAuth 2.0
oauth_2_security_best_current_practice: RFC 9700 - OAuth 2.0 Security Best Current Practice
oauth_2_threat_model_security_considerations: RFC 6819 - OAuth 2.0 Threat Model and Security Considerations
oauth_2_token_exchange: RFC 8693 - OAuth 2.0 Token Exchange