@parao: Sorry man , I don't know what dPoP is. - Strivle

How it works Leaderboard

@parao: Sorry man , I don't know what dPoP is. - Strivle

Replying to @raulgooo

Raúl R. González @raulgooo·Shark 9h

Building whatever

Good solution for this problem, do you think dPoP would help if it was added to this?

@parao·Unify 9h

Sorry man , I don't know what dPoP is.

Sign in to reply.

1 reply

Raúl R. González @raulgooo·Shark 9h

Building whatever

security protocol that adds an additional layer of security to tokens via crypto binding: datatracker.ietf.org/doc/html/rfc9449

IETF Datatracker

RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)

This document describes a mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level. This mechanism allows for the detection of replay attacks with access and refresh tokens.