WS-2021-0046

A verification flaw in the implementation of the identity token verifier library https://github.com/solid/identity-token-verifier allows DPoP proofs to be spoofed. DPoP proofs are used to bind access tokens to a private key meant to be in sole possession of a specific user. Instead of verifying...