feat(sep-1932): Client check for dpop_jkt - #522

Closed

nbarbettini wants to merge 4 commits into

modelcontextprotocol:mainfrom

nbarbettini:feat/sep-1932-client-dpop-jkt

Commits on Sep 23, 2026

feat(sep-1932): require clients to bind the authorization code with dpop_jkt

nbarbettini
and
cursoragent
committed
49650f8
feat(sep-1932): require a DPoP proof of the bound key on refresh

nbarbettini
and
cursoragent
committed
81f1e00

Commits on Sep 24, 2026

fix(sep-1932): correct dpop_jkt conformance checks

nbarbettini
and
cursoragent
committed
5d4c102
fix(sep-1932): make DPoP refresh checks conditional

nbarbettini
and
cursoragent
committed
7428cf6