From 4e41de35e52c7d7b97b446d9b82ef2d1a583bd9c Mon Sep 17 00:00:00 2001
From: Brent Halsey <brent.halsey@fusionauth.io>
Date: Tue, 23 Dec 2025 07:24:58 -0700
Subject: [PATCH] add dpop token and error type

---
 ...io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json | 2 +-
 src/main/domain/io.fusionauth.domain.oauth2.TokenType.json    | 4 ++--
 ...io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json | 2 +-
 src/main/domainNG/io.fusionauth.domain.oauth2.TokenType.json  | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/main/domain/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json b/src/main/domain/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json
index 4edd2f94b..ce9edbb02 100644
--- a/src/main/domain/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json
+++ b/src/main/domain/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json
@@ -1,5 +1,5 @@
 {
   "packageName" : "io.fusionauth.domain.oauth2",
   "type" : "OAuthErrorType",
-  "enum" : [ "invalid_request", "invalid_client", "invalid_grant", "invalid_token", "consent_required", "interaction_required", "login_required", "unauthorized_client", "invalid_scope", "server_error", "unsupported_grant_type", "unsupported_response_type", "access_denied", "change_password_required", "not_licensed", "two_factor_required", "authorization_pending", "expired_token", "unsupported_token_type" ]
+  "enum" : [ "invalid_request", "invalid_client", "invalid_grant", "invalid_token", "consent_required", "interaction_required", "login_required", "unauthorized_client", "invalid_scope", "server_error", "unsupported_grant_type", "unsupported_response_type", "access_denied", "change_password_required", "not_licensed", "two_factor_required", "authorization_pending", "expired_token", "unsupported_token_type", "invalid_dpop_proof" ]
 }
\ No newline at end of file
diff --git a/src/main/domain/io.fusionauth.domain.oauth2.TokenType.json b/src/main/domain/io.fusionauth.domain.oauth2.TokenType.json
index 571b0a30f..3bd1c9bdf 100644
--- a/src/main/domain/io.fusionauth.domain.oauth2.TokenType.json
+++ b/src/main/domain/io.fusionauth.domain.oauth2.TokenType.json
@@ -1,6 +1,6 @@
 {
   "packageName" : "io.fusionauth.domain.oauth2",
   "type" : "TokenType",
-  "description" : "/**\n * <ul>\n * <li>Bearer Token type as defined by <a href=\"https://tools.ietf.org/html/rfc6750\">RFC 6750</a>.</li>\n * <li>MAC Token type as referenced by <a href=\"https://tools.ietf.org/html/rfc6749\">RFC 6749</a> and\n * <a href=\"https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05\">\n * Draft RFC on OAuth 2.0 Message Authentication Code (MAC) Tokens</a>\n * </li>\n * </ul>\n *\n * @author Daniel DeGroff\n */\n",
-  "enum" : [ "Bearer", "MAC" ]
+  "description" : "/**\n * <ul>\n * <li>Bearer Token type as defined by <a href=\"https://tools.ietf.org/html/rfc6750\">RFC 6750</a>.</li>\n * <li>MAC Token type as referenced by <a href=\"https://tools.ietf.org/html/rfc6749\">RFC 6749</a> and\n * <a href=\"https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05\">\n * Draft RFC on OAuth 2.0 Message Authentication Code (MAC) Tokens</a>\n * </li>\n * <li>DPoP Token type as defined by <a href=\"https://datatracker.ietf.org/doc/html/rfc9449\"></li>\n * </ul>\n *\n * @author Daniel DeGroff\n */\n",
+  "enum" : [ "Bearer", "MAC", "DPoP" ]
 }
\ No newline at end of file
diff --git a/src/main/domainNG/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json b/src/main/domainNG/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json
index da432100a..cfe5f7a5d 100644
--- a/src/main/domainNG/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json
+++ b/src/main/domainNG/io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType.json
@@ -1,6 +1,6 @@
 {
   "className" : "io.fusionauth.domain.oauth2.OAuthError$OAuthErrorType",
-  "enum" : [ "invalid_request", "invalid_client", "invalid_grant", "invalid_token", "consent_required", "interaction_required", "login_required", "unauthorized_client", "invalid_scope", "server_error", "unsupported_grant_type", "unsupported_response_type", "access_denied", "change_password_required", "not_licensed", "two_factor_required", "authorization_pending", "expired_token", "unsupported_token_type" ],
+  "enum" : [ "invalid_request", "invalid_client", "invalid_grant", "invalid_token", "consent_required", "interaction_required", "login_required", "unauthorized_client", "invalid_scope", "server_error", "unsupported_grant_type", "unsupported_response_type", "access_denied", "change_password_required", "not_licensed", "two_factor_required", "authorization_pending", "expired_token", "unsupported_token_type", "invalid_dpop_proof" ],
   "imports" : [ ],
   "objectType" : "Enum",
   "packageName" : "io.fusionauth.domain.oauth2",
diff --git a/src/main/domainNG/io.fusionauth.domain.oauth2.TokenType.json b/src/main/domainNG/io.fusionauth.domain.oauth2.TokenType.json
index ab0d25ae6..d68f08d98 100644
--- a/src/main/domainNG/io.fusionauth.domain.oauth2.TokenType.json
+++ b/src/main/domainNG/io.fusionauth.domain.oauth2.TokenType.json
@@ -1,6 +1,6 @@
 {
   "className" : "io.fusionauth.domain.oauth2.TokenType",
-  "enum" : [ "Bearer", "MAC" ],
+  "enum" : [ "Bearer", "MAC", "DPoP" ],
   "imports" : [ ],
   "objectType" : "Enum",
   "packageName" : "io.fusionauth.domain.oauth2",