[4.2.0] Correct the cnf / x5t#S256 example on the Securing APIs with Certificate Bound Access Tokens page

[hisanhunais]

Purpose

• The documented example showed the x5t#S256 value as a 64-char hex SHA-256 digest, inside invalid JSON. Per RFC 8705 — which the same page cites — x5t#S256 must be the base64url-encoded SHA-256 thumbprint of the DER-encoded client certificate (43 chars), and cnf must be a JSON object. A spec-compliant validator compares the base64url thumbprint, so the documented hex value would never match a real certificate binding.

Changes

• Fix the malformed cnf snippet into a valid JSON object.
• Correct the x5t#S256 value to its base64url form.
• Add a short note clarifying the RFC 8705 encoding.

Before
"cnf", "{"x5t#S256": "9a0c3570ac7392bee14a408ecb38978852a86d38cbc087feeeeaab2c9a07b9f1"}"

After

"cnf": {
  "x5t#S256": "mgw1cKxzkr7hSkCOyziXiFKobTjLwIf-7uqrLJoHufE"
}
(The new value is the base64url encoding of the same SHA-256 digest the example previously showed as hex.)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 303b64ef-a67c-4ea1-99bd-4b21ee5ad7d8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}