aboutsummaryrefslogtreecommitdiffstats
path: root/meta.sr.ht/oauth.md
diff options
context:
space:
mode:
authorDrew DeVault <sir@cmpwn.com>2020-09-19 15:39:33 -0400
committerDrew DeVault <sir@cmpwn.com>2020-09-19 15:39:55 -0400
commit12655f2554b25ef78df27c1555f19a313624ae0b (patch)
tree46e69a8faf2c672ef4767201c4fb2c1c61939019 /meta.sr.ht/oauth.md
parent901b77029ff985f036167e33b215a27204b9dc87 (diff)
downloadsr.ht-docs-12655f2554b25ef78df27c1555f19a313624ae0b.tar.gz
Document authorization code size
Diffstat (limited to 'meta.sr.ht/oauth.md')
-rw-r--r--meta.sr.ht/oauth.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta.sr.ht/oauth.md b/meta.sr.ht/oauth.md
index 4b745c3..4c54368 100644
--- a/meta.sr.ht/oauth.md
+++ b/meta.sr.ht/oauth.md
@@ -81,3 +81,6 @@ The redirect_uri parameter is prohibited by meta.sr.ht, and MUST NOT be included
in the authorization endpoint URL. The only supported redirect URI is the one
provided during client registration. If request-specific state is required,
utilize the state parameter.
+
+The authorization code issued is a 16 character hexadecimal string, and it must
+be used within 5 minutes.