For integrating and managing the DPoP header, it is necesssary to modify the handling of pysaml2 pyeudiw to inject the oauth-client-attestation-pop
and oauth-client-attestation
headers.
Currently, the validation in the file iam-proxy-italia-project/conf/backends/pyeudiw_backend.yaml
is bypassed using the property security.wallet_attestation_required = false