Official websites use .gov
A
.gov website belongs to an official
government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you've safely
connected to the .gov website. Share sensitive
information only on official, secure websites.
Tokens used in User-Managed Access (UMA). API: Application Programming Interface; AS: Authorization Server; RP: Requesting Party.
| Token | Used by | To Access | Goal/s |
|---|---|---|---|
| Authorization API Token (AAT) | RP Client | AS Authorization API | Request an RPT |
| Protection API Token (PAT) | Resource Server | AS Protection API | Register resources or check permissions |
| Requesting Party Token (RPT) | RP Client | A resource in a Resource Server | Access a UMA-protected resource |
