Add mTLS support for token binding

[mooreds]

Add mTLS support

Problem

I want to use sender constrained tokens using standards.

Solution

Implement https://tools.ietf.org/html/rfc8705

Alternatives/workarounds

n/a

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.

[robotdan]

As an alternative, can this be done in a reverse proxy of sorts?

[mooreds]

I don't believe so, since the generated token is tied to the client certificate.

[mooreds]

Interesting blog post about this spec: https://neilmadden.blog/2022/01/20/why-the-oauth-mtls-spec-is-more-interesting-than-you-might-think/

[mooreds]

If you are after mTLS for client authentication, please open a new GitHub issue.