1. Demonstration of Proof-of-Possession at the Application Layer
https://datatracker.ietf.org/doc/draft-ietf-oauth-dpop/

2. Incremental Authorization
https://datatracker.ietf.org/doc/draft-ietf-oauth-incremental-authz/