oauth2authserver

Version

Attributes

NameRequiredDefaultDescriptionExamples
consentFilefalse---
exposeUserCredentialsToSessionfalse---
issueNonSpecIdTokensfalsefalseIssue id-tokens also in credentials-flow and password-flow . The OIDC specification, which brings in id-tokens, does not handle those flows, which is why the default value is false.-
issueNonSpecRefreshTokensfalsefalseIssue refresh-tokens also in credentials-flow. The OAuth2 specification does not issue refresh tokens in the credentials-flow, which is why the default value is false.-
issuertrue---
locationfalse-Base path under which the login dialog will be served.logindialog
messagefalse---
pathfalse---

Child Elements

ElementDescriptionCardinality
accountBlockerKeeps track of blocked user accounts (accounts become blocked after too many failed logins).0..1
cachingUserDataProviderCaching User Data provider caches previous successful logins in order to make authentication faster0..1
fileUserDataProviderA user data provider utilizing htpasswd formatted files.0..1
ldapUserDataProviderA user data provider querying an LDAP server to authorize users and retrieve attributes.0..1
sessionManagerExplanation:0..1
staticUserDataProviderA user data provider listing all user data in-place in the config file.0..1
unifyingUserDataProviderExplanation:0..1

Can be used in