dpop

DPoP proof JWTs (RFC 9449). A proof is bound to one HTTP method+URL, carries the public key in its header, and optionally a server nonce and the access token hash (ath). Signed ES256 with the per-flow DPoP key.

Values

bare_public_jwk

pub fn bare_public_jwk(
  key: gose.Key(String),
) -> Result(json.Json, String)

The public key as a bare JWK (kty/crv/x/y), for embedding in a DPoP proof header.

generate_key

pub fn generate_key() -> gose.Key(String)

proof

pub fn proof(
  key: gose.Key(String),
  method method: String,
  url url: String,
  nonce nonce: option.Option(String),
  ath ath: option.Option(String),
) -> Result(String, String)