I couldn't keep track of all the RFCs related to OAuth. So here they are.
- The OAuth 2.0 Authorization Framework
- Proof Key for Code Exchange by OAuth Public Clients
- OAuth 2.0 for Native Apps
- OAuth 2.0 Device Authorization Grant
These RFCs underly the OAuth.
- JSON Web Token (JWT)
- JSON Web Signature (JWS) Unencoded Payload Option
- JSON Web Encryption (JWE)
- The JavaScript Object Notation (JSON) Data Interchange Format