delegated-account-recovery is a protocol that allows an application to delegate the capability to recover an account (e.g. in the event of a credential loss or compromise) to an account controlled by the same user at a third party service provider.
This is a specification.
Open Source SDKs and example applications implementing this specification can be found for Java and JavaScript at https://github.com/facebook/DelegatedRecoveryReferenceImplementation, and for Ruby (developed by GitHub) at https://github.com/github/darrrr.
Facebook offers an implementation of the Recovery Provider portion of this protocol, currently in closed beta. Find more information at: https://developers.facebook.com/docs/delegated-recovery/.
The source of the specification is in the xml format used by, and the html generated with xml2rfc
See the CONTRIBUTING file for how to help out.
The specification is provided under the Creative Commons Attribution 4.0 International license.