Reference PAR in 5.3.1.1 (12)

[Mark Verstege]

Section 5.3.1.1. (12) states that authorization code binding to the DPoP key must be used in accordance with section 10.1 of DPoP. Should statement (12) also make mention to PAR? For example

if using DPoP and PAR, shall support "Authorization Code Binding to DPoP Key" (as required by section 10.1 of [I-D.ietf-oauth-dpop]).

Does this add more clarity, or is it redundant?

[Filip Skokan]

Given that PAR is always used I believe there’s no need to add “and PAR” to this statement.

Related to #503 which added said statement.

[Dave Tonge]

we discussed, PAR is required in FAPI2 so we don’t think we need to adjust the text

[Mark Verstege]

Thanks Dave and Filip that makes sense.