damienbod/DPOP-aspnetcore-idp

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

C#MIT

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

Securing APIs using ASP.NET Core and OAuth 2.0 DPoP

Debugging

Identity provider/STS: https://localhost:5001
API https://localhost:5005
UI https://localhost:5007

History

2024-06-22 Updated packages
2024-03-24 Updated packages
2024-01-28 Updated packages
2024-01-05 Updated packages
2023-11-17 Updated .NET 8
2023-11-03 Updated packages, fixed security headers
2023-10-10 Updated packages
2023-08-28 Updated packages

Links

OAuth 2.0 Demonstrating Proof of Possession DPoP

https://github.com/DuendeSoftware

https://github.com/DuendeSoftware/Samples/tree/main/IdentityServer/v6/DPoP

https://github.com/DuendeSoftware/IdentityServer.Templates

https://docs.duendesoftware.com/identityserver/v6/tokens/pop/dpop/

https://developer.okta.com/docs/guides/dpop/main/#build-the-request

https://darutk.medium.com/illustrated-dpop-oauth-access-token-security-enhancement-801680d761ff

https://learn.microsoft.com/en-us/entra/msal/dotnet/advanced/proof-of-possession-tokens