Annotate
mod_component_client/README.markdown @ 5624:d8622797e315
mod_http_oauth2: Shorten default token validity periods
With refresh tokens, short lifetime for access tokens is not a problem.
The arbitrary choice of one hour seems reasonable. RFC 6749 has it as
example value.
One week for refresh tokens matching the default archive retention
period. This means that a client that remains unused for one week will
have to sign in again. An actively used client will continually push
that forward with each used refresh token.
author |
Kim Alvefur <zash@zash.se> |
date |
Mon, 24 Jul 2023 01:30:14 +0200 |
parent |
2323:35ae59a8196d |
rev |
line source |
2323
|
1 Introduction
|
|
2 ============
|
|
3
|
|
4 This module turns Prosody hosts into components of other XMPP servers.
|
|
5
|
|
6 Configuration
|
|
7 =============
|
|
8
|
|
9 Example configuration:
|
|
10
|
|
11 ``` {.lua}
|
|
12 VirtualHost "component.example.com"
|
|
13 modules_enabled = { "component_client" }
|
|
14 component_client = {
|
|
15 host = "localhost";
|
|
16 port = 5347;
|
|
17 secret = "hunter2";
|
|
18 }
|
|
19 ```
|