Wait, isn't it already part of Oauth?

> https://datatracker.ietf.org/doc/html/rfc8693#name-delegatio...