BackRA 
Replying to @parao
Building whatever
security protocol that adds an additional layer of security to tokens via crypto binding: datatracker.ietf.org/doc/html/rfc9449
IETF Datatracker
RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)
This document describes a mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level. This mechanism allows for the detection of replay attacks with access and refresh tokens.