Annotate

mod_register_web/templates/simplecaptcha.html @ 5819:93d6e9026c1b

mod_http_oauth2: Do not enforce PKCE on Device and OOB flows PKCE does not appear to be used with the Device flow. I have found no mention of any interaction between those standards. Since no data is delivered via redirects in these cases, PKCE may not serve any purpose. This is mostly a problem because we reuse the authorization code to implement the Device and OOB flows.
author Kim Alvefur <zash@zash.se>
date Fri, 15 Dec 2023 12:10:07 +0100
parent 1228:db85ff22ae97
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1228
db85ff22ae97 mod_register_web: Add a simple fallback captcha
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 <tr>
db85ff22ae97 mod_register_web: Add a simple fallback captcha
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2 <th>What is {x} {op} {y}?</th><td>
db85ff22ae97 mod_register_web: Add a simple fallback captcha
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 <input name="captcha_challenge" type="hidden" value="{challenge}">
db85ff22ae97 mod_register_web: Add a simple fallback captcha
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 <input name="captcha_reply" pattern="[0-9]+" required type="number">
db85ff22ae97 mod_register_web: Add a simple fallback captcha
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 </td></tr>