Mercurial > prosody-modules
comparison mod_http_oauth2/mod_http_oauth2.lua @ 5858:761142ee0ff2
mod_http_oauth2: Reflect changes to defaults etc
- Resource owner password grant was disabled by default
- Tokens now include a hash of client_id making it possible to be
reasonable sure that they were issued to a particular client
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 05 Mar 2024 00:32:00 +0100 |
parents | b109773ce6fe |
children | ca3479c67e48 |
comparison
equal
deleted
inserted
replaced
5857:ff90dad75352 | 5858:761142ee0ff2 |
---|---|
1126 | 1126 |
1127 return { | 1127 return { |
1128 headers = { content_type = "application/json" }; | 1128 headers = { content_type = "application/json" }; |
1129 body = json.encode { | 1129 body = json.encode { |
1130 active = true; | 1130 active = true; |
1131 client_id = credentials.username; -- We don't really know for sure | 1131 client_id = credentials.username; -- Verified via client hash |
1132 username = jid.node(token_info.jid); | 1132 username = jid.node(token_info.jid); |
1133 scope = token_info.grant.data.oauth2_scopes; | 1133 scope = token_info.grant.data.oauth2_scopes; |
1134 token_type = purpose_map[token_info.purpose]; | 1134 token_type = purpose_map[token_info.purpose]; |
1135 exp = token.expires; | 1135 exp = token.expires; |
1136 iat = token.created; | 1136 iat = token.created; |