Open
Description
RFC7523 extends Oauth2 by using JWTs as grants.
It would be nice if this behaviour could be added as a new type of flow under the Oauth2 securityScheme, in addition to existing ones (authorizationCode, implicit, etc.)
The full name in the RFC is urn:ietf:params:oauth:grant-type:jwt-bearer
, but I guess JWT
will suffice. Apart from that, the tokenUrl
and scopes
would be needed.