Support for DPoP

[geniqtech]

Does this library support DPoP (Demonstration of Proof-of-Procession)?
If so, any sample code?

[bshaffer]

I don't know much about DPoP, but looking at the RFC, it seems like JWTs are used in DPoP, not the other way around. So this library should be able to help you implement DPoP, but there may not be a specific DPoP support added here.

[rbro]

I believe DPoP requires you to create your own JWK. Is creating a JWK something that could be added to php-jwt?

[bshaffer]

You can create a JWT using this library. That and validating JWTs are this library's main function.

See JWT::encode

https://github.com/firebase/php-jwt/blob/29fa2ce9e0582cd397711eec1e80c05ce20fabca/src/JWT.php#L199

[rbro]

I believe DPoP requires you to create your own JWK, not JWT. At least from looking at this tutorial - https://developer.okta.com/docs/guides/dpop/nonoktaresourceserver/main

[bshaffer]

@rbro

I think generating a JWK is definitely within the scope of this library, but I am not sure that I know what that particular method would look like or why it would be useful. It would take some designing.