@muze-nl/metro-oidc 0.3.3 → 0.3.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/browser.js +284 -394
- package/dist/browser.js.map +4 -4
- package/dist/browser.min.js +1 -1
- package/dist/browser.min.js.map +4 -4
- package/package.json +3 -3
- package/src/oidcmw.mjs +6 -0
package/README.md
CHANGED
|
@@ -30,7 +30,7 @@ It will then configure the correct OAuth2 settings and handle the request with [
|
|
|
30
30
|
|
|
31
31
|
metro.oidc uses OAuth2.1 by default, including PKCE and DPoP. The Keypair used in DPoP is created non-extractable, so they cannot be leaked. This means that the access_token and refresh_token, even if leaked, cannot be used anywhere else.
|
|
32
32
|
|
|
33
|
-
You can disable
|
|
33
|
+
You can disable PKCE by setting `options.client_info.code_verifier` to false.
|
|
34
34
|
You can disable DPoP by setting `options.use_dpop` to false.
|
|
35
35
|
|
|
36
36
|
## id_token
|