DPoP for Web Platform API JavaScript runtimes

An OAuth 2.x / OIDC 1.0 client library for Python built on top of `requests`.

DPoP for golang clients and servers

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

Digital authentication and identity validation, ASP.NET Core, Identity, Duende, Passkeys, Aspire, swiyu

A library that helps you create and verify OAuth2 DPoP proof tokens.

Demo Solid application using the Spring Framework.

Experimental alternative flow for OAuth First-Party Applications

A Quarkus application demonstrating DPoP (RFC 9449) token binding with Keycloak, including jti replay protection and k6 test scenarios

Learn the modern identity stack by building it — 9 interactive CLI simulations covering WebAuthn, OIDC, OAuth2, DPoP, SCIM, and CAEP in pure Node.js

Solid authentication with client credentials in python

A Bluesky OAuth2 Client, writen with Vanilla JavaScript (post about basics, hosted in dev.to)

Go framework for zero-knowledge login and sender-constrained access tokens. Implements interactive Schnorr ZK auth, short-lived JWTs bound to client DPoP keys (cnf.jkt), and ready-to-use middleware for DPoP + JWT verification. Includes reference auth server and demo API.

OAUTH client assertions using applications, basic and DPoP examples

Utilizing FRODO multi agent framework in Java to solve the radio frequency assignment problem (FAP) by applying multiple MAS algorithms such DPOP, MGM, ADOPT and others.

Pudel is a modular, AI-powered Discord bot framework built on Java 25, Spring Boot 4, and JDA 6, designed to operate as a long-running service (SaaS-style) with strong separation between core functionality and third-party plugins.

Sample of a browser app using OIDC as authentication

Work in progress Python package of Demonstrating Proof-of-Possession (DPoP)

HelseID Java client including PAR (Pushed Authorization Requests) and DPoP

Oktane lab to learn about Demonstrating Proof of Possession (DPoP) in a SPA. This lab uses Codespace and CodeTours.

OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP) server-side implementation for Node.js

Proof of concept for Demonstrating Proof-of-Possession

OIDC step-up authentication for Linux SSH and sudo. DPoP token binding, device flow MFA, provider-agnostic (Azure AD, Okta, Keycloak). Written in Rust.