diff --git a/admin_manual/configuration/server/security/oauth2.rst b/admin_manual/configuration/server/security/oauth2.rst index a1efda0fe..be0d1afdd 100644 --- a/admin_manual/configuration/server/security/oauth2.rst +++ b/admin_manual/configuration/server/security/oauth2.rst @@ -43,7 +43,7 @@ Here is an overview of how the process works: The OAuth2 App -------------- -OAuth2 support is available in ownCloud via `an OAuth2 application`_ which is available from the ownCloud Marketplace. +OAuth2 authorization server support is available in ownCloud via `an OAuth2 application`_ which is available from the ownCloud Marketplace. The app aims to: #. Connect ownCloud clients (both desktop and mobile) in a standardized and secure way. @@ -93,7 +93,7 @@ Authorization Response ^^^^^^^^^^^^^^^^^^^^^^^ After the resource owner's authorization, the app redirects to the `redirect_uri` specified in the authorization request and adds the authorization code as URL parameter `code`. -An authorization code is valid for 10 minutes. +For security reasons, an authorization code is valid for 10 minutes. If the client tries to use the authorization code more than once, the authorization server will deny the request. For further information about client registration, please refer to `the official authorization response RFC from the IETF`_. Access Token Request