Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for Demonstrating Proof of Possession (DPoP) in quarkus-oidc #42115

Closed
sberyozkin opened this issue Jul 24, 2024 · 6 comments · Fixed by #45891
Closed

Support for Demonstrating Proof of Possession (DPoP) in quarkus-oidc #42115

sberyozkin opened this issue Jul 24, 2024 · 6 comments · Fixed by #45891
Assignees
@sberyozkin
Labels
area/oidc kind/enhancement New feature or request
Milestone
3.19.0

Comments

@sberyozkin
Copy link
Member

sberyozkin commented Jul 24, 2024 •
edited
Loading

Description

https://datatracker.ietf.org/doc/html/rfc9449 is about proving that a bearer token was indeed issued to the client which is presenting it.

It also provides an authorization code flow binding to DPoP: https://datatracker.ietf.org/doc/html/rfc9449#name-authorization-code-binding-, tightening the security of the code flow process.

Implementation ideas

No response
@sberyozkin sberyozkin added the kind/enhancement New feature or request label Jul 24, 2024
@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Jul 24, 2024

/cc @pedroigor (oidc)

@sberyozkin sberyozkin changed the title Support for Demonstrating Proof of Posession (DPoP) in quarkus-oidc Support for Demonstrating Proof of Possession (DPoP) in quarkus-oidc Jul 24, 2024
@jeremy-nocek-rp
Copy link

This would benefit my product, we're getting requests to add DPoP support.

@sberyozkin
Copy link
Member Author

@jeremy-nocek-rp Sure, it is on the map for early 2025.

@sberyozkin sberyozkin self-assigned this Jan 15, 2025
@sberyozkin sberyozkin mentioned this issue Jan 27, 2025
Merged
@sberyozkin
Copy link
Member Author

@jeremy-nocek-rp FYI, #45891

@jeremy-nocek-rp
Copy link

@jeremy-nocek-rp FYI, #45891

Thanks for the heads up 😃

@sberyozkin
Copy link
Member Author

@jeremy-nocek-rp Np, it will also be evolved, most likely we'll follow up with accepting custom DPoP challenge nonce providers as well, etc

@quarkus-bot quarkus-bot bot added this to the 3.21 - main milestone Feb 14, 2025
@gsmet gsmet modified the milestones: 3.21 - main, 3.19.0 Feb 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@sberyozkin sberyozkin

Labels
area/oidc kind/enhancement New feature or request
Projects
None yet
Milestone
3.19.0
Development

Successfully merging a pull request may close this issue.

Support for OAuth2 Demonstrating Proof of Possession sberyozkin/quarkus
3 participants
@sberyozkin @gsmet @jeremy-nocek-rp