How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

DPoP-Nonce

Authentication IANA permanent

A reference entry. The registry facts and catalog measurements below are complete; the written guidance for this header has not been authored yet.

The DPoP-Nonce HTTP header — authentication, RFC 9449, not observed in the catalog.

DPoP-Nonce is authentication — Headers that carry who the caller is — credentials, tokens, keys, signatures of identity. The most declared category in the catalog and the most inconsistently spelled.

The registry

Listed in the IANA HTTP Field Name Registry as a permanent entry. Defined in RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP).

In the catalog

Registered with IANA and declared by not one of the 26,641 providers in the API Evangelist catalog. A registered field with no observed use is still part of the vocabulary — it just is not part of the practice.

Governed by these rules

Machine-enforceable governance rules from rules.apievangelist.com that apply to this header when it appears in an OpenAPI.

OpenAPI Components Headers Error error

Utilizing the headers object in the centralized OpenAPI components library helps make headers reusable across API requests and responses

Guidance: Rate Limits →
OpenAPI Components Headers Info info

Utilizing the headers object in the centralized OpenAPI components library helps make headers reusable across API requests and responses

Guidance: Rate Limits →
OpenAPI Headers Hyphenated Pascal Case error

HTTP headers should follow Hyphenated-Pascal-Case naming convention for consistency and readability, such as Content-Type, X-Request-Id, or Accept-Language.

Guidance: Naming →
OpenAPI Security Schemes API Keys In Header Error error

Having components security schemes which possesses an api-key property that allows to configure how API keys are applied to operations have a in of header set.

Guidance: Security →
OpenAPI Security Schemes API Keys Info info

Having components security schemes which possesses an api-key property that allows to configure how API keys are applied to operations.

Guidance: Security →