Software /
code /
prosody-modules
File
mod_oidc_userinfo_vcard4/README.md @ 5513:0005d4201030
mod_http_oauth2: Reject duplicate form-urlencoded parameters
Per RFC 6749 section 3.1
> Request and response parameters MUST NOT be included more than once.
Thanks to OAuch for pointing out
Also cleans up some of the icky behavior of formdecode(), like returning
a string if no '=' is included.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 02 Jun 2023 11:03:57 +0200 |
parent | 5503:320593cf7d90 |
line wrap: on
line source
--- summary: OIDC UserInfo profile details from vcard4 labels: - Stage-Alpha rockspec: dependencies: - mod_http_oauth2 >= 200 --- This module extracts profile details from the user's [vcard4][XEP-0292] and provides them in the [UserInfo] endpoint of [mod_http_oauth2] to clients the user grants authorization. Whether this is really needed is unclear at this point. When logging in with an XMPP client, it could fetch the actual vcard4 to retrieve these details, so the UserInfo details would probably primarily be useful to other OAuth 2 and OIDC clients. [UserInfo]: https://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse