Skip to content

Conversation

adeinega
Copy link
Contributor

@adeinega adeinega commented Jul 9, 2025

No description provided.

## Example Use Cases

An example of the usage of a Status List is to manage the status of issued access tokens as defined in section 1.4 of {{RFC6749}}. Token Introspection {{RFC7662}} defines a way to determine the status of an issued access token, but it requires the party trying to validate the state of access tokens to directly contact the Issuer of the access tokens for each token validation. In contrast, the mechanism defined in this specification allows a party to fetch the status for many tokens, reducing interactions with the Issuer significantly for better scalability and providing better privacy as the Issuer does not learn which specific access token is being verified (herd anonymity).
An example of the usage of a Status List is to manage the statuses of issued access tokens as defined in section 1.4 of {{RFC6749}}. Token Introspection {{RFC7662}} provides a method to determine the status of an issued access token, but it necessitates the party attempting to validate the state of access tokens to directly contact the Issuer of each token for validation. In contrast, the mechanism defined in this specification allows a party to retrieve the statuses for many tokens, reducing interactions with the Issuer substantially. This not only improves scalability but also enhances privacy by preventing the Issuer from gaining knowledge of access tokens being verified (herd anonymity).
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"tracking the usage" used in other places of this spec describes this better than "gaining knowledge of access tokens being verified" as it covers more aspects.

@adeinega adeinega changed the title grammar fixes grammar fixes and rewording Jul 10, 2025
@c2bo
Copy link
Member

c2bo commented Jul 17, 2025

@adeinega can we also add you to acknowledgements?

@adeinega
Copy link
Contributor Author

@c2bo, sure, thank you.

@c2bo c2bo merged commit 508990e into oauth-wg:main Jul 24, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants