OAuth 2.0 and OpenID Connect
This article provides information about how Tulip acts as an OAuth authorization server for OAuth clients and OAuth resource servers.
Approved IETF specifications
The documentation refers to the following approved IETF specifications:
RFC6749 - OAuth 2.0 The OAuth 2.0 Authorization Framework
RFC7662 Token Introspection OAuth 2.0 Token Introspection
RFC 7009 Token Revocation OAuth 2.0 Token Revocation
RFC7636 PKCE Proof Key for Code Exchange by OAuth Public Clients
RFC6750 Bearer tokens The OAuth 2.0 Authorization Framework: Bearer Token Usage
Draft IETF specifications
The documentation also refers to the following draft IETF specifications:
OAuth device OAuth 2.0 Device Flow for Browser-less and Input Constrained Devices (draft, dd. March 2017)
OAuth Client Assertions Client Authentication and Authorization Grants (draft, dd. October 2014)
OAuth Native Apps OAuth 2.0 for Native Apps (draft, dd. April 2017)
OAuth Token Exchange OAuth 2.0 Token Exchange
Furthermore, the documentation refers to OIDC OpenID Connect website.