view mod_sasl2_sm/README.md @ 5448:9d542e86e19a

mod_http_oauth2: Allow requesting a subset of scopes on token refresh This enables clients to request access tokens with fewer permissions than the grant they were given, reducing impact of token leak. Clients could e.g. request access tokens with some privileges and immediately revoke them after use, or other strategies.
author Kim Alvefur <zash@zash.se>
date Thu, 11 May 2023 21:40:09 +0200
parents c92c87daa09e
children
line wrap: on
line source

---
labels:
- Stage-Beta
summary: "XEP-0198 integration with SASL2"
rockspec:
  dependencies:
  - mod_sasl2
---

Add support for inlining stream management negotiation into the SASL2 process.

**Note: At the time of writing (November 2022), this module implements a
version of XEP-0198 that is still working its way through the XSF standards
process. For more information and current status, see [PR #1215](https://github.com/xsf/xeps/pull/1215).**

This module depends on [mod_sasl2] and [mod_sasl2_bind2]. It exposes no
configuration options.