--- a/mod_http_oauth2/README.markdown Fri Mar 03 22:03:50 2023 +0100
+++ b/mod_http_oauth2/README.markdown Fri Mar 03 22:48:14 2023 +0100
@@ -12,7 +12,30 @@
Configuration
=============
-None currently.
+Dynamic client registration enabled by configuring a JWT key. Algorithm
+defaults to *HS256*.
+
+```lua
+oauth2_registration_key = "securely generated JWT key here"
+oauth2_registration_algorithm = "HS256"
+oauth2_registration_options = { default_ttl = 60 * 60 * 24 * 90 }
+```
+
+Various flows can be disabled and enabled with
+`allowed_oauth2_grant_types` and `allowed_oauth2_response_types`:
+
+```lua
+allowed_oauth2_grant_types = {
+ "authorization_code"; -- authorization code grant
+ "password"; -- resource owner password grant
+}
+
+allowed_oauth2_response_types = {
+ "code"; -- authorization code flow
+ -- "token"; -- implicit flow disabled by default
+}
+```
+
Compatibility
=============