This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
bryan newbold
bnewbold.net
did:plc:44ybard66vv44zksje25o7dz
yay, this is great!
I agree that DPoP nonce juggling is one of the harder bits, especially because they also need to juggle token refresh. so there are two reasons a resource request might need to be retried.
also DPoP nonce error signaling is different between auth srv + resource srv
2025-10-11T21:03:23.882Z