OAuth 2.0 Demonstrating Proof of Possession (DPoP)

datatracker.ietf.orgsite

Demonstrates proof of possession of the client's private key for OAuth 2.0.

similar

OpenID Connect Dynamic Client Registration openid.net
site category #openid-connect link ↗

Mechanism for sender-constraining OAuth 2.0 tokens via a proof-of-possession mechanism on the application level which allows for the detection of replay attacks with tokens.
OAuth 2.0 Attestation-Based Client Authentication datatracker.ietf.org
site category #openid-connect link ↗

Extension to OAuth 2.0 enabling public clients to authenticate using key-bound attestations.
OAuth 2.0 Dynamic Client Registration Protocol datatracker.ietf.org
site category #openid-connect link ↗

Defines how an OAuth 2.0 Relying Party (RP) can dynamically register with the OAuth 2.0 server provider.
OAuth.com Playground oauth.com
site category #openid-connect link ↗

OAuth 2.0 / OpenID Connect Playground with authorization flows and step by step of the process of obtaining an access token.
Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com
site category #web-security link ↗
openid_connect github.com
tool category #openid-connect link ↗

Ruby OpenID Connect Relying party (RP) and Provider (OP) library.

OpenID Connect › Resources > Specifications > Published: “Demonstrates proof of possession of the client's private key for OAuth 2.0.”