3GPP 5G Security Architecture (TS 33.501) 33.501-13.2: Network Function Service Authorization (OAuth 2.0)
NF service consumers must obtain access tokens from the NRF to invoke services on NF service producers. Tokens must be validated for scope, audience, expiry, and signature.