RFC 8392: CBOR Web Token (CWT)
In plain English — editorial summary, not part of the RFC
CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR), and CBOR Object Signing and Encryption (COSE) is used for added application-layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON.
Document record
- Document ID
- RFC8392
- Published
- May 2018
- Authors
- M. Jones; E. Wahlstroem; S. Erdtman; H. Tschofenig
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 25
- Also known as
- —
Topics
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 8414OAuth 2.0 Authorization Server MetadataCurrent
June 2018
- RFC 8417Security Event Token (SET)Current
July 2018
- RFC 8693OAuth 2.0 Token ExchangeCurrent
January 2020
- RFC 8705OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access TokensCurrent
February 2020
- RFC 8725JSON Web Token Best Current PracticesCurrent
February 2020
- RFC 9101The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)Current
August 2021
- RFC 9728OAuth 2.0 Protected Resource MetadataCurrent
April 2025
- RFC 8935Push-Based Security Event Token (SET) Delivery Using HTTPCurrent
November 2020
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?