mirror of
https://github.com/elyby/oauth2-server.git
synced 2025-05-31 14:12:07 +05:30
Added requirements.md
This commit is contained in:
11
requirements.md
Executable file
11
requirements.md
Executable file
@@ -0,0 +1,11 @@
|
||||
---
|
||||
layout: default
|
||||
title: Requirements
|
||||
permalink: /requirements/
|
||||
---
|
||||
|
||||
# Requirements
|
||||
|
||||
In order to prevent man-in-the-middle attacks, the authorization server MUST require the use of TLS with server authentication as defined by [RFC2818](https://tools.ietf.org/html/rfc2818) for any request sent to the authorization and token endpoints. The client MUST validate the authorization server's TLS certificate as defined by [RFC6125](https://tools.ietf.org/html/rfc6125) and in accordance with its requirements for server identity authentication.
|
||||
|
||||
This library uses key cryptography in order to encrypt and decrypt, as well as verify the integrity of signatures. See the [installation](/installation) page for details on how to generate the keys.
|
Reference in New Issue
Block a user