annotate mod_component_client/README.markdown @ 5447:aa4828f040c5
mod_http_oauth2: Enforce client scope restrictions in authorization
When registering a client, a scope field can be included as a promise to
only ever use those. Here we enforce that promise, if given, ensuring a
client can't request or be granted a scope it didn't provide in its
registration. While currently there is no restrictions at registration
time, this could be changed in the future in various ways.
| author |
Kim Alvefur <zash@zash.se> |
| date |
Thu, 11 May 2023 19:33:44 +0200 |
| parents |
35ae59a8196d |
| children |
|
| rev |
line source |
|
2323
|
1 Introduction |
|
|
2 ============ |
|
|
3 |
|
|
4 This module turns Prosody hosts into components of other XMPP servers. |
|
|
5 |
|
|
6 Configuration |
|
|
7 ============= |
|
|
8 |
|
|
9 Example configuration: |
|
|
10 |
|
|
11 ``` {.lua} |
|
|
12 VirtualHost "component.example.com" |
|
|
13 modules_enabled = { "component_client" } |
|
|
14 component_client = { |
|
|
15 host = "localhost"; |
|
|
16 port = 5347; |
|
|
17 secret = "hunter2"; |
|
|
18 } |
|
|
19 ``` |
