[java-idp-plugin-vci] branch dev/FAPI created (now 7c11d50)
Codeberg
noreply at shibboleth.net
Mon Sep 28 15:53:41 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a change to branch dev/FAPI
in repository java-idp-plugin-vci.
at 7c11d50 DPoP proof validation per rfc9449#section-4.3: 'ath' required at the credential endpoint, 'htu' matched after normalization ignoring query and fragment
This branch includes the following new commits:
new 8a55269 Improve access token validation as per now that we support also jwt tokens in theory
new d44905f Accepting access tokens only in authorizarion header as per FAPI 2.0
new f354e2e Authorization code lifetime per HAIP
new e06eda4 DPoP hardening per rfc9449#section-10.1
new 7c11d50 DPoP proof validation per rfc9449#section-4.3: 'ath' required at the credential endpoint, 'htu' matched after normalization ignoring query and fragment
The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list