Payments

The primary use cases for OAuth 2.0 were for access to data resources. Over time people have used OAuth 2.0 based protocols to implement payments and other single point in time "write" authorisations.

GNAP should support this type of use case from the start - both in the design of the specification and in the examples.

Example use cases:

• Web redirect based ecommerce flows (bank or wallet provider as the AS)
• Decoupled payment flows - interaction starts at physical terminal, authorisation takes place on smart phone
• Signing contracts, e.g. signing a business contract, an employment contract, etc - this type of interaction may have one entity that provides assurance of identity, and another entity that deals with the actual digital signature