mirror of
https://github.com/elyby/oauth2-server.git
synced 2024-11-02 00:43:11 +05:30
11 lines
743 B
Markdown
11 lines
743 B
Markdown
|
---
|
||
|
|
layout: default
|
||
|
|
title: Requirements
|
||
|
|
permalink: /requirements/
|
||
|
|
---
|
||
|
|
|
||
|
|
# Requirements
|
||
|
|
|
||
|
|
In order to prevent man-in-the-middle attacks, the authorization server MUST require the use of TLS with server authentication as defined by [RFC2818](https://tools.ietf.org/html/rfc2818) for any request sent to the authorization and token endpoints. The client MUST validate the authorization server's TLS certificate as defined by [RFC6125](https://tools.ietf.org/html/rfc6125) and in accordance with its requirements for server identity authentication.
|
||
|
|
|
||
|
|
This library uses key cryptography in order to encrypt and decrypt, as well as verify the integrity of signatures. See the [installation](/installation) page for details on how to generate the keys.
|