feat(DPoP): add verification + X-Forwarded-Host X-Forwarded-Proto

2026-08-08 15:08:35 +02:00
parent 514bbc35ab
commit 2e6789e506
12 changed files with 879 additions and 21 deletions
@@ -2263,7 +2263,11 @@ impl AuthApplicationService {
                "dpop_jkt must be a 43-character base64url SHA-256 thumbprint (RFC 7638)",
            )
        })?;
-        match self.session_storage.bind_dpop_jkt(session_id, &validated).await {
+        match self
+            .session_storage
+            .bind_dpop_jkt(session_id, &validated)
+            .await
+        {
            Ok(()) => {
                tracing::info!(
                    target: "audit",