Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-07-29 00:57:57 +02:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Link to RFC 9700 OAuth 2.0 Best Current Practices

Browse source
This commit is contained in:
Hugh Nimmo-Smith 2026-05-13 21:17:00 +01:00
parent 656bf61a3c
commit bc66176e88
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelogs/client_server/newsfragments/2379.clarification Normal file
View file

@ -0,0 +1 @@
Add link to RFC 9700 OAuth 2.0 Best Current Practices.

3
content/client-server-api/_index.md
View file

@ -1742,6 +1742,9 @@ over the requirements to create a new account and is not limited by the steps
defined in this specification. It also means that less trust is given to clients defined in this specification. It also means that less trust is given to clients
because they don't have access to the user's credentials anymore. because they don't have access to the user's credentials anymore.
The best practices from [RFC 9700](https://datatracker.ietf.org/doc/html/rfc9700)
are applicable to this API and are recommended reading for implementors.
{{% boxes/warning %}} {{% boxes/warning %}}
The [User-Interactive Authentication API](#user-interactive-authentication-api) The [User-Interactive Authentication API](#user-interactive-authentication-api)
is not compatible with the OAuth 2.0 API, so the endpoints that depend on it for is not compatible with the OAuth 2.0 API, so the endpoints that depend on it for