Error response when DPoP token is used as bearer token

[ashwin-yo]

For the OAuth DPoP, what should the error response be when a DPoP token is used as a bearer token?

For example:

GET /protected-resource HTTP/1.1
Host: resource.example.org
Authorization: Bearer VALID_DPoP_TOKEN

Should the error code be 400 or 401, and what should be the error and error_description here?

[rjsparks]

This isn't the right forum for that question (this is for datatracker questions). - you need to be asking the OAuth WG. Email to [email protected] is your best option.

[ashwin-yo]

Thank you, I have sent the email.