IETF OAuth · Protocol
OAuth 2.0 Demonstrating Proof of Possession (DPoP)
Sender-constrains access and refresh tokens at the application layer with a per-request proof, so a stolen token cannot be replayed by another party.
PublishedProposed StandardCanonical documentrfc9449
Revisions
- rfccurrent
Relations 1
OAuth 2.0 Demonstrating Proof of Possession (DPoP) builds on 1
- The OAuth 2.0 Authorization FrameworkpublishedSender-constrains the framework's bearer tokens.Source
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.