Choice of DynReg, PKCE and/or DPoP
Code | Access Token | Refresh Token | Choice |
---|---|---|---|
Bearer | Bearer | Bearer | Nothing to use |
Bearer | Bearer | Sender-Constrained | DPoP (in bearer access token mode) |
Bearer | Sender-Constrained | Bearer | Impossible |
Bearer | Sender-Constrained | Sender-Constrained | DPoP |
Sender-Constrained | Bearer | Bearer | PKCE only |
Sender-Constrained | Sender-Constrained | Bearer | Impossible |