Posts tagged: #replay

Design notes for limiting replay when bearer tokens leak, including jti, session state, device signals, rotation, and proof of possession.