view mod_http_oauth2/README.markdown @ 5205:b6f41f0b5f58

mod_http_oauth2: Specify host for which to retrieve list of roles Fixes core/usermanager.lua:299: attempt to index a nil value (field '?')
author Kim Alvefur <zash@zash.se>
date Sat, 04 Mar 2023 23:36:13 +0100
parents 164a9875935b
children 3235b8bd1e55
line wrap: on
line source

---
labels:
- Stage-Alpha
summary: 'OAuth2 API'
...

Introduction
============

This module is a work-in-progress intended for developers only!

Configuration
=============

Dynamic client registration enabled by configuring a JWT key. Algorithm
defaults to *HS256*.

```lua
oauth2_registration_key = "securely generated JWT key here"
oauth2_registration_algorithm = "HS256"
oauth2_registration_options = { default_ttl = 60 * 60 * 24 * 90 }
```

Various flows can be disabled and enabled with
`allowed_oauth2_grant_types` and `allowed_oauth2_response_types`:

```lua
allowed_oauth2_grant_types = {
	"authorization_code"; -- authorization code grant
	"password"; -- resource owner password grant
}

allowed_oauth2_response_types = {
	"code"; -- authorization code flow
    -- "token"; -- implicit flow disabled by default
}
```


Compatibility
=============

Requires Prosody 0.12+ or trunk.