Diff

mod_http_oauth2/mod_http_oauth2.lua @ 5399:89c9e9bba60d

mod_http_oauth2: Advertise response modes Are you supposed to be able to influence these somewhere, or is this just response types with different labels?
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:08:35 +0200
parent 5398:38da5ca498dd
child 5400:71766a4a7322
line wrap: on
line diff
--- a/mod_http_oauth2/mod_http_oauth2.lua	Tue May 02 16:07:09 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Tue May 02 16:08:35 2023 +0200
@@ -963,6 +963,13 @@
 						return "authorization_code"
 					end
 				end);
+				response_modes_supported = array(it.keys(response_type_handlers)):map(function(h)
+					if h == "token" then
+						return "fragment"
+					elseif h == "code" then
+						return "query"
+					end
+				end);
 				authorization_response_iss_parameter_supported = true;
 
 				-- OpenID