A stolen access token is useless with DPoP. RFC 9449 stops token replay attacks, now in Spring Authorization Server 1.5 and Spring Security 7. #SpringSecurity #DPoP #OAuth2

Well … I started a Dpop store, and sold 5 items today!!!

Woot.

#thrifting #dpop #store #sales