From 10bdeef9ec0183380aed23c2dc1fc700e62e9a34 Mon Sep 17 00:00:00 2001
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Fri, 2 Jul 2021 16:36:00 +0200
Subject: [PATCH] document on_error option for STSExchange

Signed-off-by: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
---
 sts.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/sts.conf b/sts.conf
index e9d54e2..c2fbcde 100644
--- a/sts.conf
+++ b/sts.conf
@@ -34,6 +34,11 @@
 # cache.name=<string>
 # Name of the cache to use for caching the resulting token (previously defined with STSCache).
 # When not defined, the default internal shared memory cache will be used.
+#
+# on_error=[return|pass]
+# Specify the behavior when the source token is missing or the exchange fails.
+# "return" will return a 401 error to the caller, "pass" will propagate the request without a swapped token
+# When not defined, the default is return
 
 #
 # Authentication Options