Skip to content

Aditional DPoP tests and some fixes and refactoring

Edmund Jay requested to merge dpop_issues_02 into master
  • fixes #1335 - refactor dpop calls into sequence
  • fixes #1316 - skip test for signing DPoP proof with RS256 alg when using non-RSA keys
  • adds additional test for Happy flow DPOP tests per comments in #1038
    • OP should be tested that it accepts iat values within "X" delta of current timestamp (past and future).
    • The OP should be tested that when DPoP is used at the PAR endpoint, the DPoP public key is used as the dpop_jkt value and the same public key that matches the thumbprint is used at the token endpoint.

Merge request reports