Page history · mcp

Authorization Security Considerationsspecification/2026-07-28/basic/authorization/security-considerations

Every read this site has made of the page, newest first. A date is when upstream edited the page, where upstream publishes that, and otherwise when the poller caught the edit; each row says which of the two it is.

Recorded changes2including the first read

Lines now126in the newest capture

Characters9,866in the newest capture

First seen 14 Aug 2026 09:58 UTC

Last changed 20 Oct 2026 20:07 UTC

Every recorded edit

2 edits since this site first read it

WhenTitle it carriedWhatLines

20 Oct 26 Authorization Security Considerations ±changed +0−2 14 Aug 26 Authorization Security Considerations ·first recorded +128−0

As it stands

Lines126
Characters9,866
Categoryspecification
Pathspecification/2026-07-28/basic/authorization/security-considerations

Read it upstream →

Sections it gained

# Authorization Security Considerations
## Token Audience Binding and Validation
## Token Theft
## Communication Security
## Authorization Code Protection
## Mix-Up Attacks
## Open Redirection
## Client ID Metadata Document Security
### Authorization Server Abuse Protection
### Localhost Redirect URI Risks
### Trust Policies
## Confused Deputy Problem