clientAttestationPopMethodsSupported

OAuth2.0 Attestation-Based Client Authentication registers the following Proof of Possession methods:

• attestation_pop_jwt: The Proof of Possession is a dedicated Client Attestation PoP JWT as defined in Section 5.1 ("normal mode").

• dpop_combined: The Proof of Possession is a DPoP proof serving as the combined Proof of Possession as defined in Section 5.2 ("DPoP combined mode").

• none: No Client Attestation is required. A server includes this value to signal that the Client MAY omit the Client Attestation. See OAuth 2.0 Attestation-Based Client Authentication