Skip to content

Instantly share code, notes, and snippets.

@nov
Last active June 7, 2020 20:05
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nov/de61267b3f969a7b6aaefbb70bfddf7c to your computer and use it in GitHub Desktop.
Save nov/de61267b3f969a7b6aaefbb70bfddf7c to your computer and use it in GitHub Desktop.

Choice of DynReg, PKCE and/or DPoP

Code Access Token Refresh Token Choice
Bearer Bearer Bearer Nothing to use
Bearer Bearer Sender-Constrained DPoP (in bearer access token mode)
Bearer Sender-Constrained Bearer Impossible
Bearer Sender-Constrained Sender-Constrained DPoP
Sender-Constrained Bearer Bearer PKCE only
Sender-Constrained Sender-Constrained Bearer Impossible
Sender-Constrained Bearer Sender-Constrained DynReg (+ optionally PKCE)
PKCE + DPoP (in bearer access token mode)
Sender-Constrained Sender-Constrained Sender-Constrained DynReg + DPoP (+ optionally PKCE)
PKCE + DPoP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment