A draft specification that defines how SPIFFE credentials can be used as OAuth client authentication - View it on GitHub