Mercurial > prosody-modules

comparison mod_http_oauth2/README.md @ 6272:8108aec64fb9

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_http_oauth2: Support the "offline_access" for granting refresh tokens Refresh tokens are no longer included unless this scope is requested and granted. BC: This prevents existing implementations that rely on always getting the refresh token from continuing.
author Kim Alvefur <zash@zash.se>
date Wed, 02 Jul 2025 15:53:02 +0200
parents ab14e7ecb82f
children 3eb0255b41b3
comparison
equal deleted inserted replaced
6271:0bd63c52bbed 6272:8108aec64fb9
290 Further, known Prosody roles can be used as scopes. 290 Further, known Prosody roles can be used as scopes.
291 291
292 OpenID scopes such as `openid` and `profile` can be used for "Login 292 OpenID scopes such as `openid` and `profile` can be used for "Login
293 with XMPP" without granting access to more than limited profile details. 293 with XMPP" without granting access to more than limited profile details.
294 294
295 The `offline_access` scope must be requested to receive refresh tokens.
296
295 ## Compatibility 297 ## Compatibility
296 298
297 Requires Prosody trunk (April 2023), **not** compatible with Prosody 0.12 or 299 Requires Prosody trunk (April 2023), **not** compatible with Prosody 0.12 or
298 earlier. 300 earlier.