/dpop-adoption
實作並除錯 OAuth 2.0 DPoP（RFC 9449）refresh token sender-constraining。適用於 WebCrypto、Node.js ES6 與瀏覽器環境，對接 Google 的 OAuth 平台。
- 安裝次數
- 3000
- 專案星數
- 2.2 萬 ★
- 授權
- Apache-2.0
- 專案更新
- 2026-11-02
怎麼裝
npx skills add https://github.com/google/skills --skill dpop-adoption安裝前請先看過原文內容。中文說明是 AI 翻譯，不保證安全。
原文
Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com/token. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pair), or for Google Cloud IAM / service account authentication.