Support Attestation-Based Client Authentication

[dtsiflit]

HAIP requires the use of OAuth 2.0 Attestation-Based Client Authentication.

Library should be able to support this kind of client/wallet authentication.

In scope of this issue is the ability to use a Client Attestation JWT (issued by wallet provider) which basically means

• be able to create Client Attestation PoP JWT
• Populate the relevant HTTP headers when accessing PAR and/or Token Endpoint

Out of scope,

• provision of Client Attestation JWT. Library assumes that wallet has already obtained a Client Attestation

[pankaj-sp]

Hi, Could you please share the status on this? We want to use this in our current implementation.

[dtsiflit]

Hi @pankaj-sp, we are in the process of incorporating this into our development timeline. I'll make sure to keep you updated and let you know as soon as we have a confirmed start date, which should be in a couple of days. Many thanks.