Yeah, I believe that logically follows from the definition of token_type in
introspection and RFC 6749.
Do y'all think it needs to be mentioned in DPoP though? I'm not sure, to be
honest.
On Mon, Aug 16, 2021 at 5:46 AM Justin Richer wrote:
> Yes, it should be. Good catch.
>
> -Justin
> _
Yes, it should be. Good catch.
-Justin
From: OAuth [oauth-boun...@ietf.org] on behalf of Vladimir Dzhuvinov
[vladi...@connect2id.com]
Sent: Sunday, August 15, 2021 12:02 PM
To: oauth@ietf.org
Subject: [OAUTH-WG] DPoP 03 - introspection - token_type?
The
