binding auth_session to dpop
Open
@fkj is already working on this.
Since Aug 31, 2026.
first-party?
iae
- Dominant language
- No language data
- Stars
- 125
- Forks
- 41
- PR merge metrics
- No merged PRs in 30d
Description
https://www.ietf.org/archive/id/draft-ietf-oauth-first-party-apps-03.html#name-auth-session-dpop-binding recommends binding the auth_session to dpop - we should probably consider something similar, including potentially mandating it in HAIP.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.