: Publish these types in your OAuth server metadata so clients know what they can request.
: Create a registry of authorization detail types your system supports.
: A string identifying the type of authorization (e.g., payment_initiation , account_information ).
: Use encrypted or signed tokens (JWTs) if the authorization details contain sensitive transaction data.
: A new JSON-based parameter used in authorization and token requests.
: Reflect the authorized details in the resulting Access Token or via the Introspection Response for Resource Servers to verify. 3. Security Considerations