@@ -26,6 +26,18 @@ This project aims full standard compliance. All improvements on functionality,
26
26
as well as security implications, are done in a way that the standard remains
27
27
as the highest reference of choice.
28
28
29
+ If you are not familiar with the OAuth2 standards, please consult at least the
30
+ following documents:
31
+
32
+ - [ RFC 6749 - The OAuth 2.0 Authorization Framework] ( https://datatracker.ietf.org/doc/html/rfc6749 )
33
+ - [ RFC 8252 - OAuth 2.0 for Native Apps] ( https://datatracker.ietf.org/doc/html/rfc8252 )
34
+
35
+ Extended readings:
36
+
37
+ - [ RFC 6819 - OAuth 2.0 Threat Model and Security Considerations] ( https://datatracker.ietf.org/doc/html/rfc6819 )
38
+ - [ RFC 7636 - Proof Key for Code Exchange by OAuth Public Clients] ( https://datatracker.ietf.org/doc/html/rfc7636 )
39
+ - [ RFC 7591 - OAuth 2.0 Dynamic Client Registration Protocol] ( https://datatracker.ietf.org/doc/html/rfc7591 )
40
+
29
41
### Framework agnostic
30
42
31
43
Design decisions and implementations are always done with keeping in mind, that
@@ -134,33 +146,4 @@ Finally your PR needs to pass the review process:
134
146
the changes
135
147
- Once all reviewers have approved your PR it will be merged by one of the
136
148
maintainers :tada :
137
-
138
-
139
-
140
- ## For maintainers
141
-
142
- Maintainers of this repository have an extended responsibility for security and
143
- integrity. Therefore you have to take extra care on preparing publishing.
144
-
145
- ### When to release a new version?
146
-
147
- - on fixed vulnerabilities
148
- - on fixed dependency-vulnerabilites
149
- - on new added features
150
- - what else?
151
-
152
- ### When to decide between major, minor and path release?
153
-
154
- - major = breaking
155
- - minor = features and security fixes
156
- - patch = general fixes and small improvements
157
-
158
- ### How to release a new version?
159
-
160
- What's required to publish to npm, which branches are involved, what should not
161
- be done etc.
162
-
163
- ## Become a maintainer
164
-
165
- What is required to become a maintainer?
166
149
0 commit comments