Mercurial > prosody-modules
view mod_groups_oidc/README.md @ 5559:d7fb8b266663
mod_http_oauth2: Strip unknown client metadata
Per RFC 7591
> The authorization server MUST ignore any client metadata sent by the
> client that it does not understand (for instance, by silently removing
> unknown metadata from the client's registration record during
> processing).
This was previously done but unintentionally removed in 90449babaa48
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 20 Jun 2023 01:11:34 +0200 |
parents | 7d9dce4e7dd0 |
children | e1422ae7e4de |
line wrap: on
line source
--- summary: OIDC group membership in UserInfo labels: - Stage-Alpha rockspec: dependencies: - mod_http_oauth2 >= 200 --- This module exposes [mod_groups_internal] groups to [OAuth 2.0][mod_http_oauth2] clients via a `groups` scope/claim.