Web Resource Authorization Protocol (WRAP) is a profile of OAuth, also called OAuth WRAP. While similar in pattern to OAuth 1.0A, the WRAP profile(s) have a number of important capabilities that were not available previously in OAuth. This specification was contributed to the IETF OAuth WG and is the basis for OAuth 2.0.

This group has also drafted the Simple Web Token (SWT) specification which defines an Access Token format that can be used within WRAP though there hasn't been much adoption or recent discussion of the proposal.

Implementations

While OAuth WRAP is being deprecated by 2.0, as of December 2009, Facebook has been working on implementing OAuth in the FriendFeed project. Relevant content and resources:

• OAuth WRAP support in FriendFeed for feedback - Bret Taylor
• Implementing the New OAuth WRAP - Facebook Developers Blog
• Google AppEngine example application (Source code on GitHub)
• OAuth WRAP in Javascript by Luke Shepard (Source code on GitHub)

Microsoft also provides Windows Azure platform AppFabric, which implements one profile of OAuth WRAP.