Article: Server-Side DPoP and Token Exchange in Spring Security 7

T2Covered by 1 source · first reported by InfoQ at 15 Oct, 09:00 UTC

Spring Authorization Server now lives inside Spring Security 7 under the same Maven coordinates, so the upgrade is a version bump. This server-side guide covers enabling DPoP and RFC 8693 Token Exchange, explains why 7.1 apps can silently stop enforcing DPoP until they call .dPoP(), and shows how…

dev

Sources

• T2Article: Server-Side DPoP and Token Exchange in Spring Security 7InfoQ15 Oct, 09:00