DPoP JWT Fields Explained

The DPoP (Demonstration of Proof-of-Possession) JWT (JSON Web Token) includes several important fields that ensure the security and integrity of the token. Here are the key fields:

  • jti: A unique identifier for the JWT.
  • htm: The HTTP method of the request (e.g., GET, POST).
  • htu: The HTTP URI of the request.
  • iat: The issued-at time, indicating when the JWT was created.

Example DPoP JWT

{
  "jti": "unique-jwt-id",
  "htm": "POST",
  "htu": "https://api.example.com/resource",
  "iat": 1618884473
}

This example shows a DPoP JWT with a unique identifier, HTTP method, URI, and issued-at time.