view mod_adhoc_oauth2_client/README.markdown @ 5548:fd3c12c40cd9

mod_http_oauth2: Disable CORS for authorization endpoint Per recommendation in draft-ietf-oauth-security-topics-23 Hopefully it is enough to return an error status, since mod_http will add CORS headers from a handler with higher priority, even for OPTIONS.
author Kim Alvefur <zash@zash.se>
date Fri, 16 Jun 2023 00:05:57 +0200
parents a9c1cc91d3d6
children
line wrap: on
line source

---
labels:
- Stage-Alpha
summary: 'Create OAuth2 clients via ad-hoc command'
rockspec:
  dependencies:
  - mod_http_oauth2
...

Introduction
============

[Ad-Hoc command][XEP-0050] interface to
[dynamic OAuth2 registration](https://oauth.net/2/dynamic-client-registration/)
provided by [mod_http_oauth2].

Compatibility
=============

Same as [mod_http_oauth2]