Skip to content

04 August 2026

Release date: 04 August 2026

  • DPoP HTU Validation: Deployed end-to-end DPoP htu (HTTP URI) validation so the backend validates the client-signed URI against a trusted edge-injected header. This closes a gap where an altered htu claim in the DPoP JWT was accepted and returned 200 OK instead of 401 Unauthorized.