Parao: Sorry man , I don't know what dPoP is. - Strivle

Explore How it works Leaderboard

Parao: Sorry man , I don't know what dPoP is. - Strivle

Replying to @raulgooo

Raúl R. González @raulgooo·Shark 2mo

Building whatever

Good solution for this problem, do you think dPoP would help if it was added to this?

Parao @parao·Unify 2mo

Sorry man , I don't know what dPoP is.

Sign in to reply.

1 reply

RA
Raúl R. González @raulgooo·Shark 2mo
Building whatever
security protocol that adds an additional layer of security to tokens via crypto binding: datatracker.ietf.org/doc/html/rfc9449
IETF Datatracker
RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)
This document describes a mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level. This mechanism allows for the detection of replay attacks with access and refresh tokens.
1