Mercurial > prosody-modules

comparison mod_http_oauth2/README.md @ 6207:ab14e7ecb82f

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_http_oauth2: Allow JIDs as username for password grant
author magicfelix <felix@felix-zauberer.de>
date Sat, 19 Apr 2025 20:32:37 +0200
parents fe081789f7b5
children 8108aec64fb9
comparison
equal deleted inserted replaced
6206:a931a95e363e 6207:ab14e7ecb82f
82 If you know what features your templates use use you can adjust the 82 If you know what features your templates use use you can adjust the
83 `Content-Security-Policy` header to only allow what is needed: 83 `Content-Security-Policy` header to only allow what is needed:
84 84
85 ```lua 85 ```lua
86 oauth2_security_policy = "default-src 'self'" -- this is the default 86 oauth2_security_policy = "default-src 'self'" -- this is the default
87 ```
88
89 For the Resource Owner Password Grant the `username` is expected to be the only
90 localpart by default. If the OAuth client includes the domainpart in the
91 `username` it submits (e.g. user@example.org instead of just user), set this to
92 `true`. Note that this requires all clients to follow this format.
93
94 ```lua
95 oauth2_expect_username_jid = false
87 ``` 96 ```
88 97
89 ### Token parameters 98 ### Token parameters
90 99
91 The following options configure the lifetime of tokens issued by the module. 100 The following options configure the lifetime of tokens issued by the module.