Hello,

 

This may be of interest to us too:

Resource Indicators for OAuth 2.0

draft-ietf-oauth-resource-indicators-01

 

Several years of deployment and implementation experience with The OAuth 2.0 Authorization Framework [RFC6749] has uncovered a need, in

some circumstances, for the client to explicitly signal to the authorization server where it intends to use the access token it is

requesting.

 

Thanks,

--Cigdem