comparison mod_http_oauth2/mod_http_oauth2.lua @ 5398:38da5ca498dd

mod_http_oauth2: Advertise supported grant types Seems redundant, since it's just the response types with other labels.
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:07:09 +0200
parents 18b57e91b5e5
children 89c9e9bba60d
comparison
equal deleted inserted replaced
5397:18b57e91b5e5 5398:38da5ca498dd
954 response_types_supported = array(it.keys(response_type_handlers)); 954 response_types_supported = array(it.keys(response_type_handlers));
955 token_endpoint_auth_methods_supported = array({ "client_secret_post"; "client_secret_basic" }); 955 token_endpoint_auth_methods_supported = array({ "client_secret_post"; "client_secret_basic" });
956 revocation_endpoint = handle_revocation_request and module:http_url() .. "/revoke" or nil; 956 revocation_endpoint = handle_revocation_request and module:http_url() .. "/revoke" or nil;
957 revocation_endpoint_auth_methods_supported = array({ "client_secret_basic" }); 957 revocation_endpoint_auth_methods_supported = array({ "client_secret_basic" });
958 code_challenge_methods_supported = array(it.keys(verifier_transforms)); 958 code_challenge_methods_supported = array(it.keys(verifier_transforms));
959 grant_types_supported = array(it.keys(response_type_handlers)):map(function(h)
960 if h == "token" then
961 return "implicit"
962 elseif h == "code" then
963 return "authorization_code"
964 end
965 end);
959 authorization_response_iss_parameter_supported = true; 966 authorization_response_iss_parameter_supported = true;
960 967
961 -- OpenID 968 -- OpenID
962 userinfo_endpoint = handle_register_request and module:http_url() .. "/userinfo" or nil; 969 userinfo_endpoint = handle_register_request and module:http_url() .. "/userinfo" or nil;
963 id_token_signing_alg_values_supported = { "HS256" }; 970 id_token_signing_alg_values_supported = { "HS256" };