Update plug docs

tobiasbernet · Sep 2, 2021 · 9622781 · 9622781
1 parent 585eb61
commit 9622781
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/...eli_web/plug/keycloak_custom_connector.ex → ...chlusseli_web/plug/keycloak_introspect.ex b/...eli_web/plug/keycloak_custom_connector.ex → ...chlusseli_web/plug/keycloak_introspect.ex
@@ -1,9 +1,9 @@
-defmodule Schlusseli.Plug.KeycloakCustomConnector do
+defmodule Schlusseli.Plug.KeycloakIntorspect do
 @moduledoc """
-  Plug for verifying authorization on a per request basis, verifies that a token is set in the
-  `Authorization` header.
+  Plug to verify token via keycloak's introspection endpoint.
 
-  Problem: OpenIDConnect verifies the token with the public key. No `introspect` is made. We don't know if the token is valid or not.
+
+  The verification by the Keycloak introspect endpoint ensures that the token becomes invalid after a revoke.
   """
 
   import Plug.Conn

diff --git a/lib/schlusseli_web/plug/openid_connector.ex b/lib/schlusseli_web/plug/openid_connector.ex
@@ -3,7 +3,7 @@ defmodule Schlusseli.Plug.OpenidConnector do
   Plug for verifying authorization on a per request basis, verifies that a token is set in the
   `Authorization` header.
 
-  Problem: OpenIDConnect verifies the token with the public key. No `introspec` is made. We don't know if the token is valid or not.
+  Problem: OpenIDConnect verifies the token with the public key. No `introspec` is made. We do not know if the token has been revoked or not.
   """
 
   import Plug.Conn