%% You should probably cite rfc9068 instead of this I-D. @techreport{ietf-oauth-access-token-jwt-03, number = {draft-ietf-oauth-access-token-jwt-03}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-access-token-jwt/03/}, author = {Vittorio Bertocci}, title = {{JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens}}, pagetotal = 16, year = 2019, month = dec, day = 16, abstract = {This specification defines a profile for issuing OAuth 2.0 access tokens in JSON web token (JWT) format. Authorization servers and resource servers from different vendors can leverage this profile to issue and consume access tokens in interoperable manner.}, }