{
  "node_id": "ietf-oauth-2-1-authorization-framework",
  "title": "IETF OAuth 2.1 Authorization Framework - Consolidated Secure Authorization for Workflow APIs",
  "domain": "Workflow Automation",
  "version": "1.0.0",
  "last_updated": "2026-05-09",
  "bluf": "OAuth 2.1 (IETF draft-ietf-oauth-v2-1, consolidating OAuth 2.0 RFC 6749 with security best practices from RFC 8252, RFC 8707, RFC 9068, RFC 9126, and RFC 9449) is the definitive authorization framework for modern API security in workflow…",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "eu_ai_act",
      "industry_mapping",
      "iso_standard",
      "related_frameworks"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "ietf-rfc-7519-json-web-token-jwt",
    "openid-connect-core-1-0-identity-workflow"
  ],
  "primary_citations_count": 7,
  "workflow_steps_count": 8,
  "schema_fields_count": 17,
  "citation_preview": [
    {
      "instrument": "IETF draft-ietf-oauth-v2-1 - The OAuth 2.1 Authorization Framework",
      "section": "Section 4.1 - Authorization Code Grant with PKCE; Section 4.4 - Client Credentials Grant; Section 7 - Bearer Token Usage; Section 8 - Security Considerations",
      "url": "https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-12.txt"
    },
    {
      "instrument": "IETF RFC 7636 - Proof Key for Code Exchange (PKCE) by OAuth Public Clients",
      "section": "Section 4 - Protocol; code_verifier generation, code_challenge derivation (S256), and verification requirements",
      "url": "https://www.rfc-editor.org/rfc/rfc7636"
    }
  ]
}