op_
Registry Context
op_tos_uri is an optional authorization server metadata value containing a URL where the person registering a client can read the authorization server's terms of service. If supplied, the registration process should display the URL to that person.
Technical Summary
RFC 8414 defines op_tos_uri as an OPTIONAL authorization server metadata value containing a terms-of-service URL. The registration process SHOULD display the URL to the person registering the client when it is provided.
When Used
Used in OAuth authorization server metadata to provide terms-of-service information during client registration.
Normative Requirements
Authorization servers
RFC 8414 - Section 2
Include op_tos_uri as authorization server metadata containing a URL provided to the person registering the client to read the authorization server's terms of service..
OPTIONAL. URL that the authorization server provides to the person registering the client to read about the authorization server's terms of service.
registration process
RFC 8414 - Section 2
Display the op_tos_uri URL to the person registering the client..
Condition: if op_tos_uri is given
The registration process SHOULD display this URL to the person registering the client if it is given.
Validation Guidance
Treat absence of op_tos_uri as valid because this authorization server metadata value is optional.
If op_tos_uri is present, require its value to be a URL for the authorization server's terms of service.
For client registration processes, warn if a supplied op_tos_uri is not displayed to the person registering the client.
Reference
Details
- Entry Id
op_tos_ uri - Metadata Name
op_tos_ uri - Metadata Description
URL that the authorization server provides to the person registering the client to read about the authorization server's terms of service- Change Controller
IESG- Reference
RFC8414 - Section 2