Repository navigation

feat(sep-1932): AS negative probes and nonce checks (stacked on #396) - #525

Open

nbarbettini wants to merge 8 commits into

modelcontextprotocol:mainfrom

nbarbettini:feat/1932-as-dpop-negatives

Commits on Sep 9, 2026
- Add DPoP authorization-server scenario (SEP-1932, #370)
  
  PieterKas
  and
  claude
  committed
  8d8a430
- authorization-server/dpop: treat non-array alg-values as SKIP
  
  PieterKas
  and
  claude
  committed
  83760fb
- authorization-server/dpop: fix null alg-values hole; extract + test
  
  PieterKas
  and
  claude
  committed
  d01b286
- authorization-server/dpop: round-6 test polish
  
  PieterKas
  and
  claude
  committed
  bbffd4e
Commits on Sep 10, 2026
- authorization-server/dpop: note token-binding provenance in sep-1932.yaml
  
  PieterKas
  and
  claude
  committed
  19ea7ed
- authorization-server/dpop: forward the RFC 8707 resource parameter
  
  PieterKas
  and
  claude
  committed
  a384b56
- authorization-server/dpop: record refresh-token binding as excluded
  
  PieterKas
  and
  claude
  committed
  e1c4fb9
Commits on Sep 25, 2026
- authorization-server/dpop: probe invalid proofs and nonce handling
  
  nbarbettini
  and
  cursoragent
  committed
  ff169cc