Reference OAuth 2.1 Specs

Wangkanai Federation is in the middle of the conceptual phase and believes that we should start with the coming best security practice that will take shape the industrial standard planned to implement. This is combined with Proof Key for Code Exchange (RFC 7636) enforcement for all OAuth clients using the authorization code flow.

• Bearer token usage is not allowed to be used in the query string of the URI.
• Backend for Frontend should be mandatory for the Federation Framework

Project tracking for Wangkanai Federation is from GitHub Project Federation