| CARVIEW |
Select Language
HTTP/2 301
date: Fri, 26 Dec 2025 19:01:17 GMT
content-type: text/html
location: https://oauth.net/gnap/
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0CcPlBaaemSiKQe9lZQxQh%2FWzBrFBP3ftKd6NtCZxb2q7t5NF%2FCq8okLqyjauf%2FjNP%2BmLcVsEqdJS8khzinVlGQ4JQELHLIKSQ%3D%3D"}]}
cf-ray: 9b42d36d3ebc3f47-BOM
alt-svc: h3=":443"; ma=86400
HTTP/2 200
date: Fri, 26 Dec 2025 19:01:17 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-pingback: https://webmention.io/oauth/xmlrpc
link: ; rel="webmention"
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qmTyb6gQJPcSB1QjoK2EWh0ZdMnWmQ5kZBkw67pTtPwodnRgwBNI8tc2Eu11Ypl4WvZnkeGhXTCgkA9MAnUijM%2FIbUEEDESnhA%3D%3D"}]}
content-encoding: gzip
cf-ray: 9b42d36ee8133f47-BOM
alt-svc: h3=":443"; ma=86400
GNAP - Grant Negotiation and Authorization Protocol
oauth.net/gnap/
oauth.net/gnap/
Featured Video Course: The Nuts & Bolts of OAuth 2.0
GNAP
Grant Negotiation and Authorization Protocol (GNAP) is a next-generation authorization protocol formalized as RFC 9635 in October 2024. This work took place in the GNAP working group at the IETF. Questions, suggestions and protocol changes should be discussed on the mailing list or GitHub.
Early drafts of the spec were called "XYZ", "TxAuth", and "Transactional Authorization".
See Also: OAuth 2.1, an officially adopted effort to consolidate and simplify the best practices of OAuth 2.0.
More resources
- RFC announcement and status of GNAP Resource Servers
- OAuth.xyz (Justin Richer)
- XYZ: Interaction (Justin Richer)
- XYZ: Compatibility with OAuth 2.0 (Justin Richer)
- Transactional Authorization - Identiverse 2019 (Justin Richer)