The RFC is still in the works: https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/08/
It's a bit quiet in here.