comparison mod_http_oauth2/mod_http_oauth2.lua @ 5408:3989c57cc551

mod_http_oauth2: Allow configuring links to policy and terms in metadata These are for the Authorization Server, here the same as the XMPP server.
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 17:01:02 +0200
parents 149634647b48
children 993f28798c75
comparison
equal deleted inserted replaced
5407:149634647b48 5408:3989c57cc551
978 jwks_uri = nil; -- TODO? 978 jwks_uri = nil; -- TODO?
979 registration_endpoint = handle_register_request and module:http_url() .. "/register" or nil; 979 registration_endpoint = handle_register_request and module:http_url() .. "/register" or nil;
980 scopes_supported = usermanager.get_all_roles and array(it.keys(usermanager.get_all_roles(module.host))):append(array(openid_claims:items())); 980 scopes_supported = usermanager.get_all_roles and array(it.keys(usermanager.get_all_roles(module.host))):append(array(openid_claims:items()));
981 response_types_supported = array(it.keys(response_type_handlers)); 981 response_types_supported = array(it.keys(response_type_handlers));
982 token_endpoint_auth_methods_supported = array({ "client_secret_post"; "client_secret_basic" }); 982 token_endpoint_auth_methods_supported = array({ "client_secret_post"; "client_secret_basic" });
983 op_policy_uri = module:get_option_string("oauth2_policy_url", nil);
984 op_tos_uri = module:get_option_string("oauth2_terms_url", nil);
983 revocation_endpoint = handle_revocation_request and module:http_url() .. "/revoke" or nil; 985 revocation_endpoint = handle_revocation_request and module:http_url() .. "/revoke" or nil;
984 revocation_endpoint_auth_methods_supported = array({ "client_secret_basic" }); 986 revocation_endpoint_auth_methods_supported = array({ "client_secret_basic" });
985 code_challenge_methods_supported = array(it.keys(verifier_transforms)); 987 code_challenge_methods_supported = array(it.keys(verifier_transforms));
986 grant_types_supported = array(it.keys(response_type_handlers)):map(tmap { token = "implicit"; code = "authorization_code" }); 988 grant_types_supported = array(it.keys(response_type_handlers)):map(tmap { token = "implicit"; code = "authorization_code" });
987 response_modes_supported = array(it.keys(response_type_handlers)):map(tmap { token = "fragment"; code = "query" }); 989 response_modes_supported = array(it.keys(response_type_handlers)):map(tmap { token = "fragment"; code = "query" });