annotate mod_component_client/README.markdown @ 5796:93d6e9026c1b
mod_http_oauth2: Do not enforce PKCE on Device and OOB flows
PKCE does not appear to be used with the Device flow. I have found no
mention of any interaction between those standards. Since no data is
delivered via redirects in these cases, PKCE may not serve any purpose.
This is mostly a problem because we reuse the authorization code to
implement the Device and OOB flows.
| author |
Kim Alvefur <zash@zash.se> |
| date |
Fri, 15 Dec 2023 12:10:07 +0100 |
| parents |
35ae59a8196d |
| children |
|
| rev |
line source |
|
2323
|
1 Introduction |
|
|
2 ============ |
|
|
3 |
|
|
4 This module turns Prosody hosts into components of other XMPP servers. |
|
|
5 |
|
|
6 Configuration |
|
|
7 ============= |
|
|
8 |
|
|
9 Example configuration: |
|
|
10 |
|
|
11 ``` {.lua} |
|
|
12 VirtualHost "component.example.com" |
|
|
13 modules_enabled = { "component_client" } |
|
|
14 component_client = { |
|
|
15 host = "localhost"; |
|
|
16 port = 5347; |
|
|
17 secret = "hunter2"; |
|
|
18 } |
|
|
19 ``` |
