Post
bryan newbold
bnewbold.net
did:plc:44ybard66vv44zksje25o7dz
yay, this is great!
I agree that DPoP nonce juggling is one of the harder bits, especially because they also need to juggle token refresh. so there are two reasons a resource request might need to be retried.
also DPoP nonce error signaling is different between auth srv + resource srv
2025-10-11T21:03:23.882Z