The editors have applied some minor updates to the OAuth DPoP specification in preparation for discussion at IETF 113 in Vienna. Updates made were:
- Renamed the
always_uses_dpop
client registration metadata parameter todpop_bound_access_tokens
. - Clarified the relationships between server-provided nonce values, authorization servers, resource servers, and clients.
- Improved other descriptive wording.
The specification is available at:
Leave a Reply
You must be logged in to post a comment.