Comments (4)
brockallen
commented on May 18, 2024
The PoP spec seems to have lost steam in the OAuth WG. They seem to now favor the HTTP binding specs as an alternative/replacement.
from identitymodel.oidcclient.
thecontrarycat
commented on May 18, 2024
That's annoying. I'm being asked by our security team to prevent access_tokens from being used by anything other than the original device. Is there any supported way to do this with Identity Server 3 or 4? Does the ID3 implementation of PoP work or is it vulnerable in some way?
from identitymodel.oidcclient.
leastprivilege
commented on May 18, 2024
The IS3 implementation of PoP works - but is based on the specs around 1,5 years ago. There are also client libs/validation middleware in the IdentityModel org.
We didn't spend more time with that given the state of the specs. Feel free to use our code.
from identitymodel.oidcclient.
github-actions
commented on May 18, 2024
This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue.
from identitymodel.oidcclient.
Related Issues (20)
- Latest version of IdentityModel.OidcClient installs deprecated v5 of System.Text.Json on .NET Framework
- Need to change ClientID Dynamically
- Documentation: Exceptions to handle HOT 1
- OdicClient.EnsureProviderInformationAsync(CancellationToken cancellationToken) System.InvalidOperationException:Error loading discovery document: Error connecting to https://<url>/.well-known/openid-configuration/jwks Service unavailable
- Use Microsoft.Extensions.Logging.Abstractions to reduce dependencies HOT 7
- Does IdentityModel.OidcClient support Private Key JWTs with certificates HOT 6
- Upgrade to Wilson 7.x
- Support trimming in IdentityModel.OidcClient.DPoP
- Support trimming in IdentityModel.OidcClient.IdentityTokenValidator
- UWP authentication with Azure AD fail in some devices HOT 1
- Is there a way to have OIDC Client not persist the login on the Duende Oauth server? HOT 4
- Load ProviderInformation from .well-known/openid-configuration HOT 4
- Fix client builds HOT 1
- Getting StackOverflowException at JsonDocument.Parse(content!).RootElement HOT 4
- Discovery Document Request does not use Discovery Policy Authority for Request Address
- PAR support
- Make Client Assertions more extensible
- Investigate private network access spec
- StepUp Auth, Claim and FrontChannelExtraParameters
- Has the default grant type changed? HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from identitymodel.oidcclient.