File

mod_http_oauth2/html/style.css @ 5705:527c747711f3

mod_http_oauth2: Limit revocation to clients own tokens in strict mode RFC 7009 section 2.1 states: > The authorization server first validates the client credentials (in > case of a confidential client) and then verifies whether the token was > issued to the client making the revocation request. If this > validation fails, the request is refused and the client is informed of > the error by the authorization server as described below. The first part was already covered (in strict mode). This adds the later part using the hash of client_id recorded in 0860497152af It still seems weird to me that revoking a leaked token should not be allowed whoever might have discovered it, as that seems the responsible thing to do.
author Kim Alvefur <zash@zash.se>
date Sun, 29 Oct 2023 11:30:49 +0100
parent 5645:3a5cf8d80089
child 5813:429cc52c3ce8
line wrap: on
line source

body
{
	text-align:center;
	background-color:#f8f8f8;
	font-family:sans-serif
}

h1
{
	font-size:xx-large;
}

legend {
	font-size:x-large;
}
p
{
	font-size:large;
}

.error
{
	margin: 0.75em auto;
	background-color: #f8d7da;
	color: #842029;
	border: solid 1px #f5c2c7;
}

.oob
{
	background-color: #d7daf8;
	border: solid 1px #c2c7f5;
	color: #202984;
	margin: 0.75em;
}
.oob input {
	font-size: xx-large;
	font-family: monospace;
	background-color: inherit;
	color: inherit;
	border: none;
	padding: 1ex 2em;
}

input {
	margin: 0.3rem;
	padding: 0.2rem;
	line-height: 1.5rem;
	font-size: 110%;
}
h1, h2 {
	text-align: left;
}

header, main, footer {
	max-width: 600px;
	padding: 0 1.5em 1.5em 1.5em;
}

dt
{
	font-weight: bold;
	margin: 0.5em 0 0 0;
}

dd
{
	margin: 0;
}

button, input[type=submit]
{
	padding: 0.5rem;
	margin: 0.75rem;
}

@media(prefers-color-scheme:dark)
{
	body
	{
		background-color:#161616;
		color:#eee;
	}

	.error {
		color: #f8d7da;
		background-color: #842029;
	}
	.oob {
		color: #d7daf8;
		background-color: #202984;
	}


	:link
	{
		color: #6197df;
	}

	:visited
	{
		color: #9a61df;
	}
}

@media(min-width: 768px)
{
	body {
		margin-top:14vh;
	}
	header, main, footer
	{
		margin-left: auto;
		margin-right: auto;
	}

}