comparison mod_http_oauth2/mod_http_oauth2.lua @ 5454:6970c73711c2

mod_http_oauth2: Reject duplicate redirect URIs in registration
author Kim Alvefur <zash@zash.se>
date Tue, 16 May 2023 21:04:31 +0200
parents 7dc429b7c3f3
children 80a81e7f3c4e
comparison
equal deleted inserted replaced
5453:7dc429b7c3f3 5454:6970c73711c2
752 "client_uri"; 752 "client_uri";
753 -- We need at least one redirect URI for things to work 753 -- We need at least one redirect URI for things to work
754 "redirect_uris"; 754 "redirect_uris";
755 }; 755 };
756 properties = { 756 properties = {
757 redirect_uris = { type = "array"; minItems = 1; items = { type = "string"; format = "uri" } }; 757 redirect_uris = { type = "array"; minItems = 1; uniqueItems = true; items = { type = "string"; format = "uri" } };
758 token_endpoint_auth_method = { 758 token_endpoint_auth_method = {
759 type = "string"; 759 type = "string";
760 enum = { "none"; "client_secret_post"; "client_secret_basic" }; 760 enum = { "none"; "client_secret_post"; "client_secret_basic" };
761 default = "client_secret_basic"; 761 default = "client_secret_basic";
762 }; 762 };