Add DPoP (RFC 9449) proof creation and server-side validation#3443

Merged

MZOLN merged 19 commits into

devfrom

Apr 22, 2026

Commits on Apr 3, 2026

Initial prototype for dpop, work in progress

Keegan Caruso
authored and
marcinzo
committed

Commits on Apr 10, 2026

Finalize DPoP implementation
marcinzo
committed
Add net462 tests
marcinzo
committed
Removing unnecessary net462 guard
marcinzo
committed

Commits on Apr 13, 2026

Remove keycloack tests and move proof creation to test projects.
marcinzo
committed

Commits on Apr 14, 2026

Remove prefixes from proof options, after refactoring MISE #2
marcinzo
committed
Add to linux sln and add e2e tests
marcinzo
committed
Fix up the namespace
marcinzo
committed
Revert unwanted changes, fix up test warning
marcinzo
committed
Fix up public api for Tokens. Remove unused code.
marcinzo
committed
Reduce APIs surface visibility -> move to internal
marcinzo
committed
Use utility method instead
marcinzo
committed
Add netstandard2.0 PublicAPI file
marcinzo
committed

Commits on Apr 15, 2026

Clean up errors and consts
marcinzo
committed
Remove unncessary $(NoWarn)
marcinzo
committed
Collapse binding validation into proof validation. Reduce public api surface.
marcinzo
committed
Handle server error condition more explicitly.
marcinzo
committed

Commits on Apr 17, 2026

Restore errorcode property for easier WWWAuthenticate header control and introduce a Nonce property in the Result for devs that want to handle the manually and want to avoid additional token parsing.
marcinzo
committed

Commits on Apr 21, 2026

Address error messaging comments and update tests
marcinzo
committed