Unverified50% confidenceFactExact time
OAuth 2.0 Token Exchange, defined by RFC 8693, allows platform services to exchange a user token for a new token with a more restricted scope targeting specific downstream resources.
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedOAuth是一种授权框架，通过颁发短期有效的Access Token和用于续期的Refresh Token来允许第三方应用在不暴露用户密码的前提下获得有限访问权限74% similarUnverifiedOAuth 基于 RFC 6749 标准，定义了授权码流、客户端凭证流等多种模式71% similarUnverifiedOAuth 2.0 only addresses authorization, while OIDC adds a standardized identity authentication layer on top of it, introducing an ID Token—typically in JWT format—to carry user identity information.68% similarUnverifiedOAuth 2.0 is currently the most commonly used authorization protocol among SaaS services, enabling third-party applications to obtain access to restricted resources without exposing user passwords through multiple modes such as the authorization code flow and client credentials flow.68% similarVerifiedOAuth 2.0专门处理授权委托，OpenID Connect在OAuth 2.0之上叠加身份验证层，SAML多用于企业联邦身份场景68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/898129API
curl https://kongchang.com/api/v1/knowledge/claims/898129MCP
get_claim(id=898129)