aboutsummaryrefslogtreecommitdiffstats
path: root/meta.sr.ht/oauth.md
diff options
context:
space:
mode:
Diffstat (limited to 'meta.sr.ht/oauth.md')
-rw-r--r--meta.sr.ht/oauth.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta.sr.ht/oauth.md b/meta.sr.ht/oauth.md
index 4b745c3..4c54368 100644
--- a/meta.sr.ht/oauth.md
+++ b/meta.sr.ht/oauth.md
@@ -81,3 +81,6 @@ The redirect_uri parameter is prohibited by meta.sr.ht, and MUST NOT be included
in the authorization endpoint URL. The only supported redirect URI is the one
provided during client registration. If request-specific state is required,
utilize the state parameter.
+
+The authorization code issued is a 16 character hexadecimal string, and it must
+be used within 5 minutes.