GNAP

GNAP (Grant Negotiation and Authorization Protocol) is an in-progress effort to develop a next-generation authorization protocol. This work is taking place in the GNAP working group at the IETF. Questions, suggestions and protocol changes should be discussed on the mailing list or GitHub.

The latest version of the in-progress specification can be found at:

• GNAP Core Protocol
• GNAP Resource Servers

Early drafts of the spec were called "XYZ", "TxAuth", and "Transactional Authorization".

This specification is very much in progress, and interested readers are encouraged to participate in its development by joining the IETF Working Group.

See Also: OAuth 2.1, an officially adopted effort to consolidate and simplify the best practices of OAuth 2.0.

More resources

• XYZ: Interaction (Justin Richer)
• XYZ: Compatibility with OAuth 2.0 (Justin Richer)
• Transactional Authorization - Identiverse 2019 (Justin Richer)