Mercurial > prosody-modules
view mod_tos/README.md @ 5512:1fbc8718bed6
mod_http_oauth2: Bind refresh tokens to client
Prevent one OAuth client from using the refresh tokens issued to another
client as required by RFC 6819 section 5.2.2.2
See also draft-ietf-oauth-security-topics-22 section 2.2.2
Thanks to OAuch for pointing out this issue
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 02 Jun 2023 10:40:48 +0200 |
parents | 7f61d89a594d |
children |
line wrap: on
line source
# mod_tos A very drafty module to implement some kind of Terms of Service acceptance tool. Currently, this only works with clients implementing this very drafty protocol. The result of the experiments will be an update to the [ToS ProtoXEP](https://xmpp.org/extensions/inbox/tos.html), with the goal of acceptance.