Consider flag to disable DPoP

[brockallen]

DuendeSoftware/docs.duendesoftware.com#265 (comment)

[leastprivilege]

I think I would prefer to fail if a proof token is received and not the right license...

[brockallen]

Something to consider -- if there is no license, should we still emit a log entry indicating that this is a licensed feature? I'm thinking the scenarios where a customer is evaluating or in dev mode and don't know it's a higher level feature.

I was thinking this would be useful for other things as well (automatic key management is the most common one that comes up).

[josephdecock]

not the right license

This is distinct from no license at all? So non prod environments would be usable?

[brockallen]

Well, that's still open for discussion. If there's no license at all I'd say it should work, but I proposed we log that you're using an Enterprise level feature so you'd know you can't just then buy Starter, for example.

[leastprivilege]

agreed