Skip to content

Conversation

@yogeshchoudhary147
Copy link
Contributor

@yogeshchoudhary147 yogeshchoudhary147 commented Jan 12, 2026

Description

Adds comprehensive documentation and examples for DPoP (Demonstrating Proof-of-Possession) support to EXAMPLES.md, following the same structure and pattern as auth0-react.

What's Added

  • Device-bound tokens with DPoP section with detailed security explanations
  • Browser API requirements (Crypto API, IndexedDB) and supported OAuth flows
  • Basic DPoP setup with useDpop: true configuration
  • Important callouts about ES256 algorithm, new sessions, and sender constraining
  • Using createFetcher() with fetchWithAuth() for automatic token and nonce management (recommended)
  • Advanced usage examples: base URL, multiple API endpoints, POST/PUT/DELETE requests
  • Manual DPoP management with low-level methods: getDpopNonce(), setDpopNonce(), generateDpopProof()
  • Standalone components configuration with provideAuth0()

Related

  • Follows the same documentation pattern as auth0-react
  • Complements DPoP implementation from @auth0/auth0-spa-js v2.10.0
  • Spec: RFC 9449 - OAuth 2.0 DPoP

@yogeshchoudhary147 yogeshchoudhary147 requested a review from a team as a code owner January 12, 2026 04:03
@yogeshchoudhary147 yogeshchoudhary147 changed the title docs: Add comprehensive DPoP examples to EXAMPLES.md docs: Add DPoP examples to EXAMPLES.md Jan 12, 2026
- Add DPoP section to table of contents
- Document DPoP setup with useDpop configuration
- Add createFetcher() examples (recommended approach)
- Add multiple API endpoints example with separate fetchers
- Add advanced manual DPoP management example
- Add error handling with UseDpopNonceError
- Add standalone components DPoP configuration
- Include code examples for all DPoP methods: getDpopNonce, setDpopNonce, generateDpopProof, createFetcher
- Change section title to 'Device-bound tokens with DPoP'
- Add detailed intro explaining DPoP security benefits
- Document browser API requirements (Crypto API, IndexedDB)
- List supported OAuth 2.0 flows
- Add important callouts about ES256, new sessions, and sender constraining
- Reorganize content to match auth0-react structure
- Move manual DPoP management under Advanced usage subsection
- Add clearer progression from simple to advanced usage
@yogeshchoudhary147 yogeshchoudhary147 merged commit 09f48ea into main Jan 15, 2026
8 of 9 checks passed
@yogeshchoudhary147 yogeshchoudhary147 deleted the docs/add-dpop-examples branch January 15, 2026 11:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants