Skip to main content

DPoPOptions Class

Abblix.Oidc.Server

Abblix.Oidc.Server.Common.Configuration

DPoPOptions Class

Configuration options for OAuth 2.0 DPoP (RFC 9449), covering the proof validator's iat tolerance and DPoP-specific nonce policy. The nonce sub-section inherits from the generic NonceOptions so DPoP can configure stricter values independently of other nonce-service consumers without duplicating field definitions.

public class DPoPOptions

Inheritance System.Object → DPoPOptions

Properties

DPoPOptions.IssuedAtTolerance Property

Tolerance window applied to the iat claim of an incoming DPoP proof: the proof is accepted if its iat falls within this duration of the server's current time. Default is 1 minute. Tighter than the JWT exp machinery because DPoP proofs have no expiration claim — iat bounds them.

public System.TimeSpan IssuedAtTolerance { get; set; }

Property Value

System.TimeSpan

DPoPOptions.Nonce Property

DPoP-specific nonce configuration: per-endpoint require-nonce policy (RFC 9449 §8) plus DPoP-specific overrides of the generic AcceptanceWindow and RotationInterval.

public Abblix.Oidc.Server.Common.Configuration.DPoPNonceOptions Nonce { get; set; }

Property Value

DPoPNonceOptions