Using a DPoP Access Token

Send in the Authorization Header

Use the keyword DPoP

Must send additional token to prove ownership

GET /um/Users HTTP/1.1
Host: api.example.com:8443
Authorization: DPoP _0ZX0ZX_0212SDFS-124ef-af34-fsdf
DPoP: 4c35t...c414