Announcing DPoP Support for Google OAuth: Securing Refresh Tokens

T1Covered by 1 source · first reported by Google — The Keyword / AI / Research / DeepMind / Developers at 15 Oct, 18:09 UTC

Google OAuth Platform now supports DPoP (Demonstrating Proof-of-Possession) to sender-constrain refresh tokens, neutralizing Infostealer malware and adversary-in-the-middle attacks. By cryptographically binding long-lived refresh tokens while maintaining short-lived access tokens as standard Bearer…

security

Sources

• T1Announcing DPoP Support for Google OAuth: Securing Refresh TokensGoogle — The Keyword / AI / Research / DeepMind / Developers15 Oct, 18:09