document on_error option for STSExchange

Signed-off-by: Hans Zandbelt <[email protected]>
OpenIDC · Jul 2, 2021 · 10bdeef · 10bdeef
1 parent 3a36198
commit 10bdeef
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/sts.conf b/sts.conf
@@ -34,6 +34,11 @@
 # cache.name=<string>
 # Name of the cache to use for caching the resulting token (previously defined with STSCache).
 # When not defined, the default internal shared memory cache will be used.
+#
+# on_error=[return|pass]
+# Specify the behavior when the source token is missing or the exchange fails.
+# "return" will return a 401 error to the caller, "pass" will propagate the request without a swapped token
+# When not defined, the default is return
 
 #
 # Authentication Options