Missing DPoP support

Open

#421 opened on Sep 7, 2023 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language: Scala
Stars: 80
Forks: 23
PR merge metrics: No merged PRs in 30d

Description

Private-key signing of access tokens support would be nice, to support DPoP.

Although still in draft, there's already a Java based implementation in Nimbus, which should be license-compatible.

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Research direction

Start with the Nimbus DPoP implementation linked in the issue and review how this Scala OAuth2 client currently handles access-token signing. The issue names no project files or tests, so first locate the relevant signing and token-request entry points. Done means documented and tested DPoP support with a license-compatible implementation.

Written by the indexing model from the issue text.

Assessment

Tech stack: scala
Domain: authentication, security
Issue type: Feature
Difficulty: 5/5
Estimated time: Over a week
Activity status: Stale
Clarity: Mostly clear
Newbie friendliness: 20/100

A short digest of beginner-friendly GitHub issues.