record and document #384

Author: bodewig

ChangeLog

@@ -1,3 +1,7 @@
+09/23/2021
+- if lifecyle handlers return truthy values they cause the operation
+  they are handlers of to fail; see #384; thanks to @arcivanov
+
 09/19/2021
 - made jwt_verify() and bearer_jwt_verify() honor
   opts.introspection_cache_ignore as well.

README.md

@@ -219,6 +219,7 @@ h2JHukolz9xf6qN61QMLSd83+kwoBr2drp6xg3eGDLIkQCQLrkY=
              --     `openidc_logout`
              --
              --  Any, all or none of the hooks may be used. Empty `lifecycle` does nothing.
+             --  A hook that returns a truthy value causes the lifecycle action they are taking part of to fail.
 
              -- Optional : add decorator for HTTP request that is
              -- applied when lua-resty-openidc talks to the OpenID Connect