BuildClientAttestationPoPJwt
Functions
Link copied to clipboard
suspend operator fun invoke(signJwt: SignJwtFun<JsonWebToken>, clientId: String, audience: String, nonce: String? = null, lifetime: Duration = 10.minutes, clockSkew: Duration = 5.minutes): JwsSigned<JsonWebToken>
Client attestation PoP JWT, issued by the client, which can be sent to an OAuth2 Authorization Server if needed, e.g. as HTTP header OAuth-Client-Attestation-PoP, see OAuth 2.0 Attestation-Based Client Authentication