Missing dpop_signing_alg_values_supported property from Authorization Server metadata

[adibmbrk]

Current Limitation

Description:
As per RFC 9449, Authorization Servers that support DPoP, must provide a list of supported DPoP signing algorithms using the metadata property dpop_signing_alg_values_supported. The presence of this property is an indication that the Authorization Server supports DPoP.

Currently when enabling support for DPoP using org.wso2.carbon.identity.dpop, the relevant metadata property is not present in /oauth2/token/.well-known/openid-configuration.

More info can be found here.

Suggested Improvement

Include the DPoP metadata property dpop_signing_alg_values_supported in the /oauth2/token/.well-known/openid-configuration

Version

DPoP Connector Version 1.0.10