annotate mod_adhoc_oauth2_client/README.markdown @ 5461:06640647d193

mod_http_oauth2: Fix use of arbitrary ports in loopback redirect URIs Per draft-ietf-oauth-v2-1-08#section-8.4.2 > The authorization server MUST allow any port to be specified at the > time of the request for loopback IP redirect URIs, to accommodate > clients that obtain an available ephemeral port from the operating > system at the time of the request. Uncertain if it should normalize the host part, but it also seems harmless to treat IPv6 and IPv4 the same here. One thing is that "localhost" is NOT RECOMMENDED because it can sometimes be pointed to non-loopback interfaces via DNS or hosts file.
author Kim Alvefur <zash@zash.se>
date Wed, 17 May 2023 13:51:30 +0200
parents a9c1cc91d3d6
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
4264
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 ---
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2 labels:
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 - Stage-Alpha
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 summary: 'Create OAuth2 clients via ad-hoc command'
5260
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
5 rockspec:
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
6 dependencies:
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
7 - mod_http_oauth2
4264
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 ...
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10 Introduction
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
11 ============
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
12
5260
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
13 [Ad-Hoc command][XEP-0050] interface to
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
14 [dynamic OAuth2 registration](https://oauth.net/2/dynamic-client-registration/)
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
15 provided by [mod_http_oauth2].
4264
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
17 Compatibility
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
18 =============
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
19
5260
a9c1cc91d3d6 mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Kim Alvefur <zash@zash.se>
parents: 5253
diff changeset
20 Same as [mod_http_oauth2]
4264
84bdf7e01744 mod_adhoc_oauth2_client: Add stub README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
21