Annotate

mod_smacks_noerror/mod_smacks_noerror.lua @ 5390:f2363e6d9a64

mod_http_oauth2: Advertise the currently supported id_token signing algorithm This field is REQUIRED. The algorithm RS256 MUST be included, but isn't because we don't implement it, as that would require implementing a pile of additional cryptography and JWT stuff. Instead the id_token is signed using the client secret, which allows verification by the client, since it's a shared secret per OpenID Connect Core 1.0 § 10.1 under Symmetric Signatures. OpenID Connect Discovery 1.0 has a lot of REQUIRED and MUST clauses that are not supported here, but that's okay because this is served from the RFC 8414 OAuth 2.0 Authorization Server Metadata .well-known endpoint!
author Kim Alvefur <zash@zash.se>
date Sun, 30 Apr 2023 16:13:40 +0200
parent 3937:e7dc25e54d02
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3937
e7dc25e54d02 mod_smacks_noerror: This module is superseded by mod_smacks and mod_nooffline_noerror
tmolitor <thilo@eightysoft.de>
parents: 3171
diff changeset
1 -- this module is deprecated, log an error and load the superseding modules instead
e7dc25e54d02 mod_smacks_noerror: This module is superseded by mod_smacks and mod_nooffline_noerror
tmolitor <thilo@eightysoft.de>
parents: 3171
diff changeset
2 module:depends"smacks"
e7dc25e54d02 mod_smacks_noerror: This module is superseded by mod_smacks and mod_nooffline_noerror
tmolitor <thilo@eightysoft.de>
parents: 3171
diff changeset
3 module:depends"nooffline_noerror"
2392
d1e975c24545 mod_smacks_noerror: Initial commit
tmolitor <thilo@eightysoft.de>
parents:
diff changeset
4
3937
e7dc25e54d02 mod_smacks_noerror: This module is superseded by mod_smacks and mod_nooffline_noerror
tmolitor <thilo@eightysoft.de>
parents: 3171
diff changeset
5 module:log("error", "mod_smacks_noerror is deprecated! Just use mod_smacks and load mod_nooffline_noerror if you explicitly disabled offline storage (mod_offline)");