Mercurial > prosody-modules
view mod_s2s_auth_posh/README.markdown @ 5406:b86d80e21c60
mod_http_oauth2: Validate consistency of response and grant types
Ensure that these correlated fields make sense per RFC 7591 ยง 2.1, even
though we currently only check the response type during authorization.
This could probably all be deleted if (when!) we remove the implicit
grant, since then these things don't make any sense anymore.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:34:31 +0200 |
parents | 517c7f0333e3 |
children |
line wrap: on
line source
--- labels: - 'Type-S2SAuth' --- Introduction ============ [PKIX over Secure HTTP (POSH)][rfc7711] describes a method of securely delegating a domain to a hosting provider, without that hosting provider needing keys and certificates covering the hosted domain. # Validating This module performs POSH validation of other servers. It is *not* needed to delegate your own domain. # Delegation You can generate the JSON delegation file from a certificate by running `prosodyctl mod_s2s_auth_posh /path/to/example.crt`. This file needs to be served at `https://example.com/.well-known/posh/xmpp-server.json`.