https://datatracker.ietf.org/doc/html/rfc7662#section-2.2
Would it be sensible to mention that if the "token_type" gets set in a introspection response, it must be "DPoP"?
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-03#section-6.2 Vladimir -- Vladimir Dzhuvinov
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
