1 个仓库
Validates proof-of-possession tokens by verifying cryptographic signatures over HTTP requests.
Distinct from Proof Verification Interfaces: None of the existing candidates cover DPoP proof-of-possession verification specific to OAuth 2.1 token binding.
Explore 1 awesome GitHub repository matching security & cryptography · DPoP Proof Verifications. Refine with filters or upvote what's useful.
Spring Authorization Server is an OAuth 2.1 and OpenID Connect 1.0 authorization server built on Spring Security. It implements the full protocol surface for issuing access and refresh tokens, including authorization code, client credentials, device code, and token exchange grants, as well as pushed authorization requests and user consent management. The server also functions as an OpenID Connect provider, supporting ID tokens, userinfo, discovery, logout, and dynamic client registration. The project distinguishes itself through an extensible framework that allows custom grant types, pluggabl
Provides DPoP proof verification to bind access tokens to client public keys and prevent replay attacks.