Post
Mike P
fentiger.wtf
did:plc:6rcekt7ghpnu2amqdksw3iyb
"The application starts with the OAuth credential, then trades it ... for a “member grant”. ... The application uses the member grant token to authenticate with the space owner and request a space credential on behalf of the user."
Have you seen ID-JAG?
https://www.ietf.org/archive/id/draft-ietf-oauth-identity-assertion-authz-grant-01.html
2026-06-05T19:01:42.071Z