https://auth0.com/blog/how-the-jwt-profile-for-oauth-20-access-tokens-became-rfc9068/
From Idea to Standard How the JWT Profile for OAuth 2.0 Access Tokens Became RFC9068
A first person account of how modern open identity standards are made
https://dovecot.org/list/dovecot/2023-March/126183.html
OAuth2: local validation with RFC9068 tokens
localvalidationtokens