DPoP for Web Platform API JavaScript runtimes

An OAuth 2.x / OIDC 1.0 client library for Python built on top of `requests`.

DPoP for golang clients and servers

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

Digital authentication and identity validation, ASP.NET Core, Identity, Duende, Passkeys, Aspire, swiyu

A library that helps you create and verify OAuth2 DPoP proof tokens.

Experimental alternative flow for OAuth First-Party Applications

Demo Solid application using the Spring Framework.

A Quarkus application demonstrating DPoP (RFC 9449) token binding with Keycloak, including jti replay protection and k6 test scenarios

Learn the modern identity stack by building it — 9 interactive CLI simulations covering WebAuthn, OIDC, OAuth2, DPoP, SCIM, and CAEP in pure Node.js

Solid authentication with client credentials in python

A Bluesky OAuth2 Client, writen with Vanilla JavaScript (post about basics, hosted in dev.to)

Go framework for zero-knowledge login and sender-constrained access tokens. Implements interactive Schnorr ZK auth, short-lived JWTs bound to client DPoP keys (cnf.jkt), and ready-to-use middleware for DPoP + JWT verification. Includes reference auth server and demo API.

OAUTH client assertions using applications, basic and DPoP examples

Utilizing FRODO multi agent framework in Java to solve the radio frequency assignment problem (FAP) by applying multiple MAS algorithms such DPOP, MGM, ADOPT and others.

Pudel is a modular, AI-powered Discord bot framework built on Java 25, Spring Boot 4, and JDA 6, designed to operate as a long-running service (SaaS-style) with strong separation between core functionality and third-party plugins.

Work in progress Python package of Demonstrating Proof-of-Possession (DPoP)

Oktane lab to learn about Demonstrating Proof of Possession (DPoP) in a SPA. This lab uses Codespace and CodeTours.

HelseID Java client including PAR (Pushed Authorization Requests) and DPoP

Government-grade Zero Trust API for .NET 10. A post-quantum ready implementation of FAPI 2.0, SD-JWT (Selective Disclosure), DPoP, and real-time SSF/CAE signals, hardened with ML-DSA signatures for maximum-security identity architectures.