Software / code / prosody-modules
Diff
mod_groups_internal/mod_groups_internal.lua @ 5550:4fda06be6b08
mod_http_oauth2: Make note about handling repeated
RFC 6749 states
> If an authorization code is used more than once, the authorization
> server MUST deny the request and SHOULD revoke (when possible) all
> tokens previously issued based on that authorization code.
We should follow the SHOULD.
The MUST is already covered by removing the code state from the cache.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 16 Jun 2023 00:10:46 +0200 |
| parent | 4707:27f7ed9f50cd |
| child | 5708:9edc698848e9 |
