When
"config": {
"clientAuthentication": "wia",
-> the wallet uses a wallet insta,ce attestation to authenticate with the AS (token endpoint or PAR endpoint). In that cas the wallet ust add a PoP jwt in the header of the request : see https://datatracker.ietf.org/doc/html/draft-ietf-oauth-attestation-based-client-auth-07#name-client-attestation-http-hea
The jst is sihed with the key of the wallet insta,ce attestation.
Becarefful : do not confuse with DPop which is another jwt . The main difference is that DPoP is used in HAIP with PoP .
If dpop is also requested (hAIP profile s EUDIW) then PoP and DPoP are both in the header.
When
"config": {
"clientAuthentication": "wia",
-> the wallet uses a wallet insta,ce attestation to authenticate with the AS (token endpoint or PAR endpoint). In that cas the wallet ust add a PoP jwt in the header of the request : see https://datatracker.ietf.org/doc/html/draft-ietf-oauth-attestation-based-client-auth-07#name-client-attestation-http-hea
The jst is sihed with the key of the wallet insta,ce attestation.
Becarefful : do not confuse with DPop which is another jwt . The main difference is that DPoP is used in HAIP with PoP .
If dpop is also requested (hAIP profile s EUDIW) then PoP and DPoP are both in the header.