Internet Engineering Task Force (IETF) W. Denniss Request for Comments: 8252 Google BCP: 212 J. Bradley Updates: 6749 Ping Identity Category: Best Current Practice October 2017 ISSN: 2070-1721 OAuth 2.0 for Native Apps Abstract OAuth 2.0 authorization requests from native apps should only be made through external user-agents, primarily the user's browser. This specification details the security an