annotate mod_http_altconnect/README.markdown @ 5796:93d6e9026c1b

mod_http_oauth2: Do not enforce PKCE on Device and OOB flows PKCE does not appear to be used with the Device flow. I have found no mention of any interaction between those standards. Since no data is delivered via redirects in these cases, PKCE may not serve any purpose. This is mostly a problem because we reuse the authorization code to implement the Device and OOB flows.
author Kim Alvefur <zash@zash.se>
date Fri, 15 Dec 2023 12:10:07 +0100
parents d3d27f2558fb
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3709
d3d27f2558fb mod_http_altconnect: Add a stub README (thanks JC for reminding me this existed)
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 This module helps make BOSH and WebSocket connection endpoints
d3d27f2558fb mod_http_altconnect: Add a stub README (thanks JC for reminding me this existed)
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2 discoverable via the HTTP method described in
d3d27f2558fb mod_http_altconnect: Add a stub README (thanks JC for reminding me this existed)
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 [XEP-0156](https://xmpp.org/extensions/xep-0156.html#http).