Description
Add replay protection required by spec to prevent reuse of PoP JWTs or challenges.
Potential considerations
- Implement jti tracking for PoP JWTs using a sliding window
- Ensure
jti cannot be reused for the same client instance
- Implement efficient storage (map, LRU, or Trie/Patricia Trie if justified)
- Detect challenge reuse
- Enforce expiration of replay entries
- Integrate verification into authenticator + challenge endpoint
Description
Add replay protection required by spec to prevent reuse of PoP JWTs or challenges.
Potential considerations
jticannot be reused for the same client instance