Annotate
mod_component_client/README.markdown @ 5447:aa4828f040c5
mod_http_oauth2: Enforce client scope restrictions in authorization
When registering a client, a scope field can be included as a promise to
only ever use those. Here we enforce that promise, if given, ensuring a
client can't request or be granted a scope it didn't provide in its
registration. While currently there is no restrictions at registration
time, this could be changed in the future in various ways.
| author |
Kim Alvefur <zash@zash.se> |
| date |
Thu, 11 May 2023 19:33:44 +0200 |
| parent |
2323:35ae59a8196d |
| rev |
line source |
|
2323
|
1 Introduction
|
|
|
2 ============
|
|
|
3
|
|
|
4 This module turns Prosody hosts into components of other XMPP servers.
|
|
|
5
|
|
|
6 Configuration
|
|
|
7 =============
|
|
|
8
|
|
|
9 Example configuration:
|
|
|
10
|
|
|
11 ``` {.lua}
|
|
|
12 VirtualHost "component.example.com"
|
|
|
13 modules_enabled = { "component_client" }
|
|
|
14 component_client = {
|
|
|
15 host = "localhost";
|
|
|
16 port = 5347;
|
|
|
17 secret = "hunter2";
|
|
|
18 }
|
|
|
19 ```
|
