feat(sep-1932): DPoP error codes (stacked on #527) - #528

Open

nbarbettini wants to merge 9 commits into

modelcontextprotocol:mainfrom

nbarbettini:feat/1932-server-error-code-get

Commits on Sep 9, 2026

Add DPoP server proof-validation scenario (SEP-1932, #369)

PieterKas
and
claude
committed
692db64
server/dpop: round-4 nonce/clock hardening

PieterKas
and
claude
committed
13676b7
server/dpop: round-5 comment fixes

PieterKas
and
claude
committed
dd9fd77

Commits on Sep 25, 2026

server/dpop: require 401 + challenge for Bearer-scheme rejection

nbarbettini
and
cursoragent
committed
dc35b8c

Commits on Oct 4, 2026

server/dpop: prove RejectsBearerScheme accepts a Bearer challenge

nbarbettini
and
cursoragent
committed
1385732
Merge origin/main into feat/tighten-dpop-bearer-downgrade

nbarbettini
and
cursoragent
committed
ff777cc
server/dpop: emit RejectsBearerScheme as its own check id

nbarbettini
and
cursoragent
committed
248e957
server/dpop: grade the DPoP error code

nbarbettini
and
cursoragent
committed
8a2b2af
server/dpop: score error codes only on real 401s

nbarbettini
and
cursoragent
committed
770a6f4