I have a .net 8 webApi used for logging in to a secure site using OpenIdConnect.
We are using Duende nuget packages to handle DPoP. This works great, but we have a workflow where we enrich the acccess token with an extra claim (RAR.