Mercurial > prosody-modules
view mod_oidc_userinfo_vcard4/README.md @ 5367:93d445b26063
mod_http_oauth2: Validate redirect URI depending on application type
Per https://openid.net/specs/openid-connect-registration-1_0.html
require that web applications use https:// and native applications must
use either http://localhost or a custom (non-https) URI.
Previous requirement that hostname matches that of client_uri is kept
for web applications.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 25 Apr 2023 19:49:41 +0200 |
parents | f8ec43db580b |
children | 320593cf7d90 |
line wrap: on
line source
--- summary: OIDC UserInfo profile details from vcard4 labels: - Stage-Alpha rockspec: dependencies: - mod_http_oauth2 --- This module extracts profile details from the user's [vcard4][XEP-0292] and provides them in the [UserInfo] endpoint of [mod_http_oauth2] to clients the user grants authorization. Whether this is really needed is unclear at this point. When logging in with an XMPP client, it could fetch the actual vcard4 to retrieve these details, so the UserInfo details would probably primarily be useful to other OAuth 2 and OIDC clients. [UserInfo]: https://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse