Skip to content

Update auth_session binding requirements#149

Merged
aaronpk merged 4 commits intomainfrom
aaronpk-patch-3
Feb 27, 2026
Merged

Update auth_session binding requirements#149
aaronpk merged 4 commits intomainfrom
aaronpk-patch-3

Conversation

@aaronpk
Copy link
Member

@aaronpk aaronpk commented Feb 20, 2026

Changed 'MUST' to 'SHOULD' for auth_session device binding and added a reference to DPoP binding. Closes #129

Changed 'MUST' to 'SHOULD' for auth_session device binding and added a reference to DPoP binding. Closes #129
Copy link
Collaborator

@PieterKas PieterKas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is similar to PR 156 #156

They both address the same concerns- this one is a bit more concise, so happy if we close the other one - let me know your preference.

@aaronpk aaronpk added this to the Draft -03 milestone Feb 27, 2026
@aaronpk aaronpk removed the discuss label Feb 27, 2026
@aaronpk aaronpk merged commit 6bba277 into main Feb 27, 2026
2 checks passed
@aaronpk aaronpk deleted the aaronpk-patch-3 branch February 27, 2026 17:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Binding the auth session to the device

2 participants