Skip to content

Commit

Permalink
update docs on cache contents
Browse files Browse the repository at this point in the history
Signed-off-by: Hans Zandbelt <[email protected]>
  • Loading branch information
zandbelt committed Oct 15, 2023
1 parent c1586f6 commit a64d49e
Showing 1 changed file with 10 additions and 6 deletions.
16 changes: 10 additions & 6 deletions auth_openidc.conf
Original file line number Diff line number Diff line change
Expand Up @@ -622,12 +622,16 @@
########################################################################################

# Cache type, used for temporary storage that is shared across Apache processes/servers for:
# a) session state
# b) nonce values to prevent replay attacks
# c) validated OAuth 2.0 tokens
# d) JWK sets that have been retrieved from jwk_uri's
# e) resolved OP metadata when using OIDCProviderMetadataUrl
# f) temporary state associated with Request URI's
# - authenticated user session state
# - nonce values from authorization requests (to prevent replay attacks)
# - validated OAuth 2.0 access tokens
# - refresh tokens during their usage in a refresh token request i.e. refreshing an access token and possible the refresh token itself
# - JWK sets that have been retrieved from jwk_uri's (to validate id_token, logout_token, JWT access_token and JWT userinfo response)
# - resolved OP metadata when using OIDCProviderMetadataUrl and/or OIDCOAuthServerMetadataURL
# - jti values from logout_token when receiving Backchannel Logout requests
# - temporary state associated with Request URI's
# - signed JWTs when using OIDCPassUserInfoAs signed_jwt and environment variable OIDC_USERINFO_SIGNED_JWT_CACHE_TTL
# - JQ filter results when using OIDCFilterClaimsExpr and/or OIDCUserInfoClaimsExpr and/or Require claims_expr
# must be one of \"shm\", \"memcache\", \"file\" or, if Redis support is compiled in, \"redis\"
# When not defined, "shm" (shared memory) is used.
#OIDCCacheType [shm|memcache|file[|redis]]
Expand Down

0 comments on commit a64d49e

Please sign in to comment.