feat(sep-1932): tighten the Bearer-downgrade probe (stacked on #395) - #527

Open

nbarbettini wants to merge 7 commits into

modelcontextprotocol:mainfrom

nbarbettini:feat/tighten-dpop-bearer-downgrade

Commits on Sep 9, 2026

Add DPoP server proof-validation scenario (SEP-1932, #369)

PieterKas
and
claude
committed
692db64
server/dpop: round-4 nonce/clock hardening

PieterKas
and
claude
committed
13676b7
server/dpop: round-5 comment fixes

PieterKas
and
claude
committed
dd9fd77

Commits on Sep 25, 2026

server/dpop: require 401 + challenge for Bearer-scheme rejection

nbarbettini
and
cursoragent
committed
dc35b8c

Commits on Oct 4, 2026

server/dpop: prove RejectsBearerScheme accepts a Bearer challenge

nbarbettini
and
cursoragent
committed
1385732
Merge origin/main into feat/tighten-dpop-bearer-downgrade

nbarbettini
and
cursoragent
committed
ff777cc
server/dpop: emit RejectsBearerScheme as its own check id

nbarbettini
and
cursoragent
committed
248e957