Possible miswording in section 9.5.1.

[janakamarasena]

Under section 9.5.1. DPoP: Demonstrating Proof-of-Possession it mentions “… The authorization server MUST ensure that the same key is used in all subsequent Authorization Challenge Requests, or in the eventual token request…” I think it was meant to say “... Authorization Challenge Requests, and in the eventual token request…”