Proof-of-Possession Tokens for OAuth Using JWS HTTP Signatures
Annabelle Backman · 2019
This document describes a method of generating and validating proof- of-possession tokens for use with OAuth 2.0. The required proof is provided via a JSON Web Signature (JWS) representing a signature of a minimal subset of elements from the HTTP request.