Support PAR standard

[mooreds]

Support PAR standard

Problem

Support the Pushed Authorization Request IETF standard.

"PAR fosters OAuth security by providing clients a simple means for a confidential and integrity protected authorization request. "

This basically lets a client POST to start the OAuth flow, rather than using the GET.

Solution

Implement the RFC. https://www.rfc-editor.org/rfc/rfc9126.html

Alternatives/workarounds

n/a

Additional context

Just approved as of today: https://datatracker.ietf.org/doc/draft-ietf-oauth-par/ https://mailarchive.ietf.org/arch/msg/oauth/PgPAJq-zrYOXN1l9AAOjEFs_vvY/

Related

• [Category] OpenID Connect #2324

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.