Mercurial > prosody-modules
annotate mod_lib_ldap/dev/slapd.conf @ 5617:d8622797e315
mod_http_oauth2: Shorten default token validity periods
With refresh tokens, short lifetime for access tokens is not a problem.
The arbitrary choice of one hour seems reasonable. RFC 6749 has it as
example value.
One week for refresh tokens matching the default archive retention
period. This means that a client that remains unused for one week will
have to sign in again. An actively used client will continually push
that forward with each used refresh token.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Mon, 24 Jul 2023 01:30:14 +0200 |
| parents | 1f45cef9e5c7 |
| children |
| rev | line source |
|---|---|
| 809 | 1 include /etc/openldap/schema/core.schema |
| 2 # I needed the following two schema definitions for posixGroup; if you don't | |
| 3 # need it, don't include them | |
| 4 include /etc/openldap/schema/cosine.schema | |
| 5 include /etc/openldap/schema/nis.schema | |
|
822
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
6 # needed for inetOrgPerson so I can test jpegPhoto |
|
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
7 include /etc/openldap/schema/inetorgperson.schema |
| 809 | 8 |
| 9 pidfile /var/run/openldap/slapd.pid | |
| 10 argsfile /var/run/openldap/slapd.args | |
| 11 database bdb | |
| 12 suffix "dc=example,dc=com" | |
| 13 rootdn "cn=Manager,dc=example,dc=com" | |
| 14 rootpw prosody | |
| 15 directory /var/lib/openldap/openldap-data | |
| 16 index objectClass eq |