Description

https://datatracker.ietf.org/doc/html/rfc9449 is about proving that a bearer token was indeed issued to the client which is presenting it.

It also provides an authorization code flow binding to DPoP: https://datatracker.ietf.org/doc/html/rfc9449#name-authorization-code-binding-, tightening the security of the code flow process.

Implementation ideas

No response