Announcing DPoP Support for Google OAuth: Securing Refresh Tokens
First reported · 3h ago · 1 source
Crest summary — written by AI from the 1 source below; every figure is checked against them · model deepseek-flash
Summary
Google added DPoP support to its OAuth Platform, sender-constraining refresh tokens.
Key facts
- The feature is called Demonstrating Proof-of-Possession (DPoP).
- It applies to refresh tokens issued through Google OAuth.
Why it matters
Developers integrating Google OAuth can bind refresh tokens to a client-held key, so a stolen token alone is less useful to an attacker.
Companies
Technologies
- DPoPstandard
- Google OAuthproduct
Related on Crest
Matched by rule, not by AI: a repository linked in the coverage, or a technology or company in this event that Crest tracks.
Packages
Original sources (1)
The report this event was built from. Crest of Tech keeps no article bodies: the full text is at each source.
- Google Developers BlogOfficial · PrimaryAnnouncing DPoP Support for Google OAuth: Securing Refresh TokensPublish time not givenRead at Google Developers Blog