document options only available for Apache >= 2.4 in auth_openidc.conf
# - encryption of the (temporary) state cookie
# - encryption of cache entries, that may include the session cookie, see: OIDCCacheEncrypt and OIDCSessionType
# Note that an encrypted cache mechanism can be shared between servers if they use the same OIDCCryptoPassphrase
+# Only for Apache >= 2.4.x:
# If the value begins with exec: the resulting command will be executed and the
-# first line returned to standard output by the program will be used as the
-# password. The command may be absolute or relative to the web server root.
-#OIDCCryptoPassphrase <passphrase>
-#OIDCCryptoPassphrase "exec:/path/to/otherProgram argument1"
+# first line returned to standard output by the program will be used as the password.
+# The command may be absolute or relative to the web server root.
+#OIDCCryptoPassphrase [ <passphrase> | "exec:/path/to/otherProgram arg1" ]
#
# All other entries below this are optional though some may be required in a
# and/or the absence of "Accept" header with any of the values "text/html" "application/xhtml+xml" or "*/*"
# and returns 401 for such non-browser/non-html clients. See: https://github.com/zmartzone/mod_auth_openidc/wiki/Cookies#tldr
#
+# Only for Apache >= 2.4.x:
# Since verson 2.4.4 a boolean Apache expression as the second parameter to specify which requests
# need to match to return the configured value in the first parameter to override the default "auth".
# See also: https://httpd.apache.org/docs/2.4/expr.html.
