Comment by jricher

8 months ago

The working group was closed because the core specification is published as a finished RFC:

https://www.rfc-editor.org/rfc/rfc9635.html

The group's other major work, the GNAP RS specification, has passed IESG final review and is in the queue with the RFC editor. This means that it's finished except for some final text edits and will be a final RFC soon too:

https://www.rfc-editor.org/current_queue.php#draft-ietf-gnap...

The group closed because it didn't have any more work to do.

As for adoption, we've seen it implemented in a handful of spaces around the internet, most of them in places where there are core problems with the OAuth model or GNAP offers cleaner support for some key feature like ephemeral clients or key management.