3 documents tagués avec "advanced-security"

PAR, JAR, and rate limiting for LuxID Partners with elevated security requirements. PAR and JAR are informational only - not currently implemented by LuxID.

Patterns for one LuxID application acting on behalf of a user at another service: delegated tokens, token exchange, and refresh token scoping.

LuxID RFC 7662 token introspection reference: request format, response fields, caching, and why local JWT validation is preferred today.