OAuth mTLS

rfc8705

支持certificate thumbprint binding，例如cnf : { “x5t#S256” : “xxxx” }。

注意certificate spoofing，即limit number of CAs, client & server agree out of band on the set of trust anchors。