document response_mode=form_post

voronin-ilya · Jan 4, 2022 · 23ca9e1 · 23ca9e1
1 parent 3ba8fe1
commit 23ca9e1
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,6 @@
+01/04/2022
+- added support for OAuth 2.0 Form Post Response Mode.
+
 12/23/2021
 - use Github actions for docker-based CI; delete Travis files
 

diff --git a/README.md b/README.md
@@ -133,6 +133,7 @@ h2JHukolz9xf6qN61QMLSd83+kwoBr2drp6xg3eGDLIkQCQLrkY=
              -- Connection keepalive with the OP can be enabled ("yes") or disabled ("no").
              --keepalive = "no",
 
+             --response_mode=form_post can be used to make lua-resty-openidc use the [OAuth 2.0 Form Post Response Mode](https://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html). *Note* for modern browsers you will need to set [`$session_cookie_samesite`](https://github.com/bungle/lua-resty-session#string-sessioncookiesamesite) to `None` with form_post unless your OpenID Connect Provider and Relying Party share the same domain.
              --authorization_params = { hd="zmartzone.eu" },
              --scope = "openid email profile",
              -- Refresh the users id_token after 900 seconds without requiring re-authentication