IETF - RFC 9449
OAuth 2.0 Demonstrating Proof of Possession (DPoP)
active, Most Current
| Organization: | IETF |
| Publication Date: | 1 September 2023 |
| Status: | active |
| Page Count: | 39 |
scope:
This document describes a mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level. This mechanism allows for the detection of replay attacks with access and refresh tokens.
Document History
RFC 9449
September 1, 2023
OAuth 2.0 Demonstrating Proof of Possession (DPoP)
This document describes a mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level. This mechanism allows for the detection of replay attacks...