Web Authorization Protocol T. Lodderstedt Internet-Draft yes.com Intended status: Best Current Practice J. Bradley Expires: January 9, 2020 Yubico A. Labunets Facebook D. Fett yes.com July 8, 2019 OAuth 2.0 Security Best Current Practice draft-ietf-oauth-security-topics-13 Abstract This document describes best current security practice for OAuth 2.0. It updates and extends the OAuth 2.0 Security T