Security Framework

The 1EdTech Security Framework defines the common security patterns that 1EdTech service and message-exchange specifications are expected to use, so implementers meet consistent requirements across more than one standard. It is built on OAuth 2.0 (RFC 6749, 6750), JSON Web Tokens (RFC 7515–7519, 7523), and OpenID Connect Core, and covers both web-service call flows and signed message exchanges such as an LTI launch. It was published as a Final Release in May 2019; v1.1 followed in July 2021.

1EdTech Korea publishes Korean-language summaries of this framework for readers in Korea. The framework specification and the security bulletins are maintained in English by 1EdTech. If you are reading in English, please continue to the official page.