class

Authly::RegistrationPolicy

Inherits Reference < Object

What a dynamic registration may ask for (RFC 7591), judged against the host's allow-lists (registration_grant_types, registration_response_types, registration_scopes).

Constants

LOOPBACK_HOSTS = {"localhost", "127.0.0.1", "::1"}
MAX_REDIRECT_URIS = 10
MAX_URI_LENGTH = 2048

Constructors

new(config : Configuration = Authly.config)
Source

Class methods

https_uri?(value : String) : Bool

A page or document the registration points at (client home page, logo, policy): https only.

Source
redirect_uri?(value : String) : Bool

An exact redirect URI the client can safely be sent back to (RFC 8252, OAuth 2.0 Security BCP): https, http on a loopback host, or a private-use scheme named after a domain (com.example.app:/cb). No fragment, user info, wildcard, blank or control character, so it can only ever match itself.

Source

Instance methods

violation(client : DynamicClient) : Violation | Nil

The first rule client breaks, nil when it breaks none.

Source

Nested types