12655f2554b25ef78df27c1555f19a313624ae0b — Drew DeVault a month ago 901b770
Document authorization code size
1 files changed, 3 insertions(+), 0 deletions(-)

M meta.sr.ht/oauth.md
M meta.sr.ht/oauth.md => meta.sr.ht/oauth.md +3 -0
@@ 81,3 81,6 @@ The redirect_uri parameter is prohibited by meta.sr.ht, and MUST NOT be included
in the authorization endpoint URL. The only supported redirect URI is the one
provided during client registration. If request-specific state is required,
utilize the state parameter.

The authorization code issued is a 16 character hexadecimal string, and it must
be used within 5 minutes.