In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.