Skip to content

Commit

Permalink
Update public/source/index.php
Browse files Browse the repository at this point in the history
Co-authored-by: Jamie Tanna <[email protected]>
  • Loading branch information
aaronpk and jamietanna authored Oct 16, 2021
1 parent 734257d commit f4d7073
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion public/source/index.php
Original file line number Diff line number Diff line change
Expand Up @@ -764,7 +764,7 @@
<p>In requests to the authorization server, a client MAY indicate the protected resource (a.k.a. resource server, application, API, etc.) to which it is requesting access by including a "resource" parameter in the request, as described in [[RFC8707]] <a href="https://datatracker.ietf.org/doc/html/rfc8707">Resource Indicators for OAuth 2.0</a>.</p>

<p>The parameter value identifies a resource to which the client is requesting access. The client SHOULD provide the most specific URI that it can for the complete API or set of resources it intends to access. It differs from [[RRFC8707]] in that the parameter value MUST correspond to a network addressable location of the protect resource. The authorization server SHOULD audience-restrict issued access tokens to the resource(s) indicated by the "resource" parameter.</p>
<p> If the client omits the "resource" parameter when requesting authorization, the authorization server MAY process the request with no specific resource or by using a predefined default resource value.</p>
<p>If the client omits the "resource" parameter when requesting authorization, the authorization server MAY process the request with no specific resource or by using a predefined default resource value.</p>

<p>When the "resource" parameter is used on an access token request made to the token endpoint, for all grant types, it indicates the target service or protected resource where the client intends to use the requested access token.</p>

Expand Down

0 comments on commit f4d7073

Please sign in to comment.