Advanced token security features in Duende IdentityServer including DPoP, mTLS certificate binding, Pushed Authorization Requests (PAR), JWT Secured Authorization Requests (JAR), and FAPI 2.0 compliance configuration.
Install
npx skills add DuendeSoftware/duende-skills --skill identityserver-token-securitynpx skills add DuendeSoftware/duende-skills --skill identityserver-token-security -a claude-code -gnpx skills add DuendeSoftware/duende-skills --skill identityserver-token-security -a codex -ggemini skills install https://github.com/DuendeSoftware/duende-skills.git --path skills/identityserver-token-securitygh skill install DuendeSoftware/duende-skills identityserver-token-securitygit clone --depth 1 https://github.com/DuendeSoftware/duende-skills /tmp/DuendeSoftware__duende-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/DuendeSoftware__duende-skills/skills/identityserver-token-security ~/.claude/skills/identityserver-token-security # Claude Code
cp -R /tmp/DuendeSoftware__duende-skills/skills/identityserver-token-security ~/.agents/skills/identityserver-token-security # Codex, Cursor, Gemini CLI, Copilot, OpenCode