Sign and verify DPoP proofs for token exchanges and configure enforcement settings.
npx skills add https://github.com/curtismu7/AI-demo --skill dpop
Please help me install this Agent Skill. Skill: dpop Source: https://github.com/curtismu7/AI-demo/tree/main/.claude/skills/dpop Command: npx skills add https://github.com/curtismu7/AI-demo --skill dpop
This Skill provides secure handling and verification of DPoP tokens, ensuring sender-constrained token security for sensitive data exchanges.
Enforce DPoP proof requirements for your token exchange.
High-intent search queries and answers about installing and using this skill.
DPoP proof signing creates sender-constrained tokens by binding a JSON Web Token to a specific public key. This ensures that only the client holding the private key can use the token, preventing token replay and theft.
You verify DPoP proofs by validating the JSON Web Token signature and checking its claims against the incoming request. This process confirms the sender's identity and ensures the token was not intercepted.
Yes, you can configure DPoP-related feature flags and enforcement settings to mandate proof requirements. This allows you to enforce sender-constrained token security across your token exchanges selectively.
You need DPoP for authorization_details intent-binding when securing sensitive data exchanges that require proof of possession. It binds the authorization request to the client, ensuring the intent cannot be hijacked.
Sender-constrained token security is necessary because standard bearer tokens can be stolen and reused. DPoP mitigates this by requiring a cryptographic proof of possession for every token exchange.
secutils-devGenerate and manage cryptographic private keys for TLS and JWT.
majiayu000Implement OAuth 2.1 with PKCE and JWT verification for secure authentication.
modu-aiConfigure Auth0 attack protection, MFA, and token binding.
api7Configure mutual TLS end-to-end for APISIX using the a6 CLI.
