Google OAuth adds DPoP support to secure refresh tokens
Google OAuth Platform now supports DPoP to sender-constrain refresh tokens, protecting against infostealer malware and adversary-in-the-middle attacks. Developers running multi-agent or Model Context Protocol workloads can use Google Cloud Secure Token Service for secure token delegation across agent chains.
First seen 15 Oct, 18:16 UTC on Google for Developers1 sourceLast update 5d ago
Google DeepMindUpdate · 15 Oct
Product update
What the sources say
Linked, never rewritten. Official means the lab itself.
Press0
No independent coverage yet.
How it unfolded
Every source in the order it appeared. Times in UTC.
Keep up with Google
Google on the ScoreIts timelineFollow to mark Google's stories across the site. No account needed.