dpop-adoption

Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com/token. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pai

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• card-twitter 107,550 ★
  Twitter quote or data card designed to pair with a post.
• card-xiaohongshu 107,550 ★
  Xiaohongshu-style knowledge cards, arranged as a swipeable multi-card carousel.
• Facebook Automation 79,451 ★
  Automate Facebook Page management including post creation, scheduling, video uploads, Messenger conversations,
• social 60,203 ★
  When the user wants organic social content for LinkedIn, X, Instagram, TikTok, or Facebook, or asks what to po
• hermes-tweet 42,495 ★
  Install and operate Hermes Tweet, a Hermes Agent plugin for X/Twitter research, timeline reading, tweet analys