-
Notifications
You must be signed in to change notification settings - Fork 61
Add basic documentation for personal sessions #5187
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Deploying matrix-authentication-service-docs with
|
| Latest commit: |
9edf149
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://889952d0.matrix-authentication-service-docs.pages.dev |
| Branch Preview URL: | https://rei-pat-doc.matrix-authentication-service-docs.pages.dev |
|
|
||
| For now, personal access tokens must be created by administrators through the [Admin API], satisfying use case (2). | ||
| [Element Admin](https://github.com/element-hq/element-admin), available by default in Element Server Suite, can be used to do this interactively. | ||
| You can also use the online beta deployment at [admin-beta.element.dev](https://admin-beta.element.dev/). <!--- TODO stable deployment --> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'll bring up the stable deployment again tomorrow, fine with leaving the TODO for now
| This works by presenting the client credentials to get back an access token. | ||
| The simplest type of client credentials is a client ID and client secret pair, but MAS also supports client authentication with a JWT ([RFC 7523]), which is a robust way to authenticate clients without a shared secret. | ||
|
|
||
| ## Personal sessions (personal access tokens) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could we add a note about ownership of the token, that only the owner can refresh it?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
does 9edf149 suit?
Part of: #4492
Bit of a stub, but I think it's probably OK enough to be 'something is better than nothing'.