Mercurial > prosody-modules

view mod_groups_oidc/README.md @ 5549:01a0b67a9afd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_http_oauth2: Add TODO about disabling password grant Per recommendation in draft-ietf-oauth-security-topics-23 it should at the very least be disabled by default. However since this is used by the Snikket web portal some care needs to be taken not to break this, unless it's already broken by other changes to this module.
author Kim Alvefur <zash@zash.se>
date Fri, 16 Jun 2023 00:06:53 +0200
parents 7d9dce4e7dd0
children e1422ae7e4de
line wrap: on
line source

---
summary: OIDC group membership in UserInfo
labels:
- Stage-Alpha
rockspec:
  dependencies:
  - mod_http_oauth2 >= 200
---

This module exposes [mod_groups_internal] groups to
[OAuth 2.0][mod_http_oauth2] clients via a `groups` scope/claim.