annotate mod_component_client/README.markdown @ 5512:1fbc8718bed6
mod_http_oauth2: Bind refresh tokens to client
Prevent one OAuth client from using the refresh tokens issued to another
client as required by RFC 6819 section 5.2.2.2
See also draft-ietf-oauth-security-topics-22 section 2.2.2
Thanks to OAuch for pointing out this issue
author |
Kim Alvefur <zash@zash.se> |
date |
Fri, 02 Jun 2023 10:40:48 +0200 |
parents |
35ae59a8196d |
children |
|
rev |
line source |
2323
|
1 Introduction |
|
2 ============ |
|
3 |
|
4 This module turns Prosody hosts into components of other XMPP servers. |
|
5 |
|
6 Configuration |
|
7 ============= |
|
8 |
|
9 Example configuration: |
|
10 |
|
11 ``` {.lua} |
|
12 VirtualHost "component.example.com" |
|
13 modules_enabled = { "component_client" } |
|
14 component_client = { |
|
15 host = "localhost"; |
|
16 port = 5347; |
|
17 secret = "hunter2"; |
|
18 } |
|
19 ``` |