KEYCLOAK-4765 Adding documentation for access_token query parameter parsing.

This commit is contained in:
John Ament 2017-05-11 12:53:01 -04:00
parent b6f333af44
commit c6dde6afdf

View file

@ -232,3 +232,8 @@ public-key-cache-ttl::
Adapter will always try to download new public key when it recognize token with unknown `kid` . If it recognize token with known `kid`, it will Adapter will always try to download new public key when it recognize token with unknown `kid` . If it recognize token with known `kid`, it will
just use the public key downloaded previously. However at least once per this configured interval (1 day by default) will be new just use the public key downloaded previously. However at least once per this configured interval (1 day by default) will be new
public key always downloaded even if the `kid` of token is already known. public key always downloaded even if the `kid` of token is already known.
ignore-oauth-query-parameter::
Defaults to `false`, if set to `true` will turn off processing of the `access_token`
query parameter for bearer token processing. Users will not be able to authenticate
if they only pass in an `access_token`