diff --git a/docs/interfaces/DPoPHandle.md b/docs/interfaces/DPoPHandle.md
index a8b3c555..2dada3bf 100644
--- a/docs/interfaces/DPoPHandle.md
+++ b/docs/interfaces/DPoPHandle.md
@@ -12,3 +12,20 @@ from [getDPoPHandle](../functions/getDPoPHandle.md)
 ## See
 
 [RFC 9449 - OAuth 2.0 Demonstrating Proof of Possession (DPoP)](https://www.rfc-editor.org/rfc/rfc9449.html)
+
+## Methods
+
+### calculateThumbprint()
+
+▸ **calculateThumbprint**(): [`Promise`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Promise)\<`string`\>
+
+Calculates the JWK Thumbprint of the DPoP public key using the SHA-256 hash function for use as
+the optional `dpop_jkt` authorization request parameter.
+
+#### Returns
+
+[`Promise`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Promise)\<`string`\>
+
+#### See
+
+[RFC 9449 - OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)](https://www.rfc-editor.org/rfc/rfc9449.html#name-authorization-code-binding-)
diff --git a/package-lock.json b/package-lock.json
index 260d0265..e31cf27b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "jose": "^5.10.0",
-        "oauth4webapi": "^3.2.0"
+        "oauth4webapi": "^3.3.0"
       },
       "devDependencies": {
         "@koa/cors": "^5.0.0",
@@ -28,7 +28,7 @@
         "edge-runtime": "^4.0.1",
         "esbuild": "^0.25.0",
         "ky": "^1.7.5",
-        "oidc-provider": "^8.7.0",
+        "oidc-provider": "^8.8.0",
         "patch-package": "^8.0.0",
         "prettier": "^3.5.1",
         "prettier-plugin-jsdoc": "^1.3.2",
@@ -5110,9 +5110,9 @@
       }
     },
     "node_modules/oauth4webapi": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/oauth4webapi/-/oauth4webapi-3.2.0.tgz",
-      "integrity": "sha512-2sYwQXuuzGKOHpnM7QL9BssDrly5gKCgJKTyrhmFIHzJRj0fFsr6GVJEdesmrX6NpMg2u63V4hJwRsZE6PUSSA==",
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/oauth4webapi/-/oauth4webapi-3.3.0.tgz",
+      "integrity": "sha512-ZlozhPlFfobzh3hB72gnBFLjXpugl/dljz1fJSRdqaV2r3D5dmi5lg2QWI0LmUYuazmE+b5exsloEv6toUtw9g==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -5139,9 +5139,9 @@
       }
     },
     "node_modules/oidc-provider": {
-      "version": "8.7.0",
-      "resolved": "https://registry.npmjs.org/oidc-provider/-/oidc-provider-8.7.0.tgz",
-      "integrity": "sha512-H0AE07n7d5zBHwP8bDb1Yg+NokP+BybisUPB2kGG/lI0aPvLL/JcEhh3vJsz3UbThoz2p+6a0xGTBA8a3yDUGg==",
+      "version": "8.8.0",
+      "resolved": "https://registry.npmjs.org/oidc-provider/-/oidc-provider-8.8.0.tgz",
+      "integrity": "sha512-5b4QncVOVsU8BLpD0ofQBRq2aX9Juhc0wFbaZSQbAmgN1jVfCZfYt3GEPPmJ8Tc/mvfX735PNH/LnuyWzMn9tQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 0d91796e..8f0417ff 100644
--- a/package.json
+++ b/package.json
@@ -85,7 +85,7 @@
   },
   "dependencies": {
     "jose": "^5.10.0",
-    "oauth4webapi": "^3.2.0"
+    "oauth4webapi": "^3.3.0"
   },
   "devDependencies": {
     "@koa/cors": "^5.0.0",
@@ -103,7 +103,7 @@
     "edge-runtime": "^4.0.1",
     "esbuild": "^0.25.0",
     "ky": "^1.7.5",
-    "oidc-provider": "^8.7.0",
+    "oidc-provider": "^8.8.0",
     "patch-package": "^8.0.0",
     "prettier": "^3.5.1",
     "prettier-plugin-jsdoc": "^1.3.2",