feat(sep-1932): AS negative probes and nonce checks (stacked on #396) - #525

Open

nbarbettini wants to merge 8 commits into

modelcontextprotocol:mainfrom

nbarbettini:feat/1932-as-dpop-negatives

Commits on Sep 9, 2026

Commits on Sep 10, 2026

authorization-server/dpop: note token-binding provenance in sep-1932.yaml

PieterKas
and
claude
committed
19ea7ed
authorization-server/dpop: forward the RFC 8707 resource parameter

PieterKas
and
claude
committed
a384b56
authorization-server/dpop: record refresh-token binding as excluded

PieterKas
and
claude
committed
e1c4fb9

Commits on Sep 25, 2026

authorization-server/dpop: probe invalid proofs and nonce handling

nbarbettini
and
cursoragent
committed
ff169cc