Section: 13.4.1.1.1 OAuth 2.0 roles
Content: OAuth 2.0 roles, as defined in clause 1.1 of RFC 6749 [43], are as follows: a. The Network Repository Function (NRF) shall be the OAuth 2.0 Authorization server. b. The NF Service Consumer shall be the OAuth 2.0 client. c. The NF Service Producer shall be the OAuth 2.0 resource server. OAuth 2.0 client (NF Service Consumer) registration with the OAuth 2.0 authorization server (NRF) The NF Service registration procedure, as defined in clause 4.17.1 of TS 23.502[ Procedures for the 5G System (5GS) ]  [8], may be used to register the OAuth 2.0 client (NF Service Consumer) with the OAuth 2.0 Authorization server (NRF), as described in clause 2.0 of RFC 6749 [43]. The client id, used during OAuth 2.0 registration, shall be the NF Instance Id of the NF. OAuth2.0 clients may also register with the NRF using OAM. A Network Function that does not implement this option shall be able to get an access token from the NRF as long as the NRF is able to authenticate and authorize the Network Function during the NF access token get service request. OAuth 2.0 resource server (NF Service Producer) registration with the OAuth 2.0 authorization server (NRF) The NF Service registration procedure, as defined in clause 4.17.1 of TS 23.502[ Procedures for the 5G System (5GS) ]  [8], shall be used to register the OAuth 2.0 resource server (NF Service Producer) with the OAuth 2.0 Authorization server (NRF). The NF Service Producer, as part of its NF profile, may include "additional scope" information related to the allowed service operations and resources per NF Service Consumer type. Figure 13.4.1.1-1b NF Service Producer registers in NRF 1) The NF Service Producer registers as OAuth 2.0 resource server in the NRF. The NF profile configuration data of the NF Service Producer may include the "additional scope". The "additional scope" information indicates the resources and the actions (service operations) that are allowed on these resources for the NF Service Consumer. These resources may be per NF type of the NF Service Consumer or per NF instance ID of the NF Service Consumer. 2-3) After storing the NF Profile, NRF responds successfully.