Beyond OAuth? GNAP as the Next Generation of Authentication

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

The Grant Negotiation and Authorization Protocol, or GNAP (“g-nap”), is currently being developed in an Internet Engineering Task Force (IETF) working group. Here, I’ll discuss why GNAP is being developed and what its upcoming first release might mean for you.

Per the GNAP working group charter, the protocol will be used for authorization, API access, user identifiers, and identity assertions. GNAP is in the discussion and iteration stage and is slated to be released in multiple parts starting sometime in 2021.

In a typical OAuth2 authorization code grant, the owner of a resource can grant delegated access to protected resources.

DevOps Articles