Skip to content

Draft -01

Choose a tag to compare

@aaronpk aaronpk released this 01 Mar 17:24
· 39 commits to main since this release
  • Added clarification on use of authorization code binding when using DPoP with the authorization challenge endpoint.
  • Removed ash claim to simplify DPoP binding with auth_session value.
  • Fixed how "redirect to web" mechanism works with PKCE.
  • Added "intermediate requests" section to clarify these requests are out of scope, moved "auth session" description to that section.