* Properly validate JWK `htu` claim by enforcing URL without query or fragment * type fix * Return DPoP validation result from `authenticateRequest` * Log clients using invalid "htu" claim in DPoP proof * review comments * fix lint * tidy * rename dpop result to dpop proof
83 B
83 B
@atproto/pds
@atproto/pds |
---|
patch |
Log clients using invalid "htu" claim in DPoP proof