#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')
### [Abblix\.Oidc\.Server\.Common\.Configuration](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration 'Abblix\.Oidc\.Server\.Common\.Configuration')

## DPoPNonceOptions Class

DPoP\-specific extension of [NonceOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions') per RFC 9449 §8\.
Inherits the generic primitive's `AcceptanceWindow` and
`RotationInterval` so DPoP can override them independently of any
other nonce\-service consumer, and adds the per\-endpoint policy that says
which OAuth endpoints reject DPoP proofs without a `nonce` claim
\(responding with `use_dpop_nonce` and a fresh `DPoP-Nonce`
header\)\.

```csharp
public class DPoPNonceOptions : Abblix.Oidc.Server.Features.Nonces.NonceOptions
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → [NonceOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions') → DPoPNonceOptions

### Remarks
Per\-endpoint flags exist only for endpoints where RFC 9449 specifies DPoP
applicability: the token endpoint \(§5\) and protected resources / UserInfo
\(§7\)\. RFC 9449 §6\.2 explicitly disclaims DPoP at the introspection
endpoint and stays silent on the revocation endpoint, so flags for those
endpoints would be misleading non\-spec promises and are intentionally
absent\.

DPoP is the only nonce-service consumer at present, so the active
`RollingHmacNonceService` binds directly against this type via
[DPoP](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.OidcOptions#Abblix.Oidc.Server.Common.Configuration.OidcOptions.DPoP 'Abblix\.Oidc\.Server\.Common\.Configuration\.OidcOptions\.DPoP').[Nonce](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.DPoPOptions#Abblix.Oidc.Server.Common.Configuration.DPoPOptions.Nonce 'Abblix\.Oidc\.Server\.Common\.Configuration\.DPoPOptions\.Nonce'); the
inherited [AcceptanceWindow](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions#Abblix.Oidc.Server.Features.Nonces.NonceOptions.AcceptanceWindow 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions\.AcceptanceWindow') and
[RotationInterval](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions#Abblix.Oidc.Server.Features.Nonces.NonceOptions.RotationInterval 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions\.RotationInterval') drive issuance. When a
second consumer (e.g. state-parameter validation) arrives, it brings
its own [NonceOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions')-derived options class and its own
service registration; the inheritance hierarchy is what lets each
consumer diverge on window and rotation independently.
### Properties

## DPoPNonceOptions\.RequireAtTokenEndpoint Property {#Abblix.Oidc.Server.Common.Configuration.DPoPNonceOptions.RequireAtTokenEndpoint}

When `true`, the token endpoint rejects DPoP requests that omit a
nonce claim with `use_dpop_nonce` per RFC 9449 §8\. Defaults to
`false`; raise to `true` to opt the deployment into
nonce\-protected token issuance\.

```csharp
public bool RequireAtTokenEndpoint { get; set; }
```

#### Property Value
[System\.Boolean](https://learn.microsoft.com/en-us/dotnet/api/system.boolean 'System\.Boolean')

## DPoPNonceOptions\.RequireAtUserInfoEndpoint Property {#Abblix.Oidc.Server.Common.Configuration.DPoPNonceOptions.RequireAtUserInfoEndpoint}

Same as [RequireAtTokenEndpoint](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.DPoPNonceOptions#Abblix.Oidc.Server.Common.Configuration.DPoPNonceOptions.RequireAtTokenEndpoint 'Abblix\.Oidc\.Server\.Common\.Configuration\.DPoPNonceOptions\.RequireAtTokenEndpoint') but for the UserInfo
endpoint per RFC 9449 §7\. Defaults to `false`\.

```csharp
public bool RequireAtUserInfoEndpoint { get; set; }
```

#### Property Value
[System\.Boolean](https://learn.microsoft.com/en-us/dotnet/api/system.boolean 'System\.Boolean')