fixed settings doc

Author: synasius

docs/conf.py

@@ -31,7 +31,7 @@
 
 # Add any Sphinx extension module names here, as strings. They can be extensions
 # coming with Sphinx (named 'sphinx.ext.*') or your custom ones.
-extensions = ['sphinx.ext.autodoc', 'sphinx.ext.todo', 'sphinx.ext.coverage', 'rfc', 'settings_generator']
+extensions = ['sphinx.ext.autodoc', 'sphinx.ext.todo', 'sphinx.ext.coverage', 'rfc',]
 
 # Add any paths that contain templates here, relative to this directory.
 templates_path = ['_templates']

docs/rest-framework/permissions.rst

@@ -46,5 +46,5 @@ For example:
         permission_classes = [TokenHasReadWriteScope]
         required_scopes = ['music']
 
-When a request is performed both the `READ_SCOPE`\`WRITE_SCOPE` and 'music' scopes are required to be authorized for the current access token.
+When a request is performed both the `READ_SCOPE` \\ `WRITE_SCOPE` and 'music' scopes are required to be authorized for the current access token.
 

docs/settings.rst

@@ -26,5 +26,58 @@ A big *thank you* to the guys from Django REST Framework for inspiring this.
 List of available settings
 --------------------------
 
-.. settings_generator::
-    :type: definitions
+ACCESS_TOKEN_EXPIRE_SECONDS
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+The number of seconds an access token remains valid. Requesting a protected
+resource after this duration will fail. Keep this value high enough so clients
+can cache the token for a reasonable amount of time.
+
+APPLICATION_MODEL
+~~~~~~~~~~~~~~~~~
+The import string of the class (model) representing your applications. Overwrite
+this value if you wrote your own implementation (subclass of
+``oauth2_provider.models.Application``).
+
+AUTHORIZATION_CODE_EXPIRE_SECONDS
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+The number of seconds an authorization code remains valid. Requesting an access
+token after this duration will fail. :rfc:`4.1.2` recommends a
+10 minutes (600 seconds) duration.
+
+CLIENT_ID_GENERATOR_CLASS
+~~~~~~~~~~~~~~~~~~~~~~~~~
+The import string of the class responsible for generating client identifiers.
+These are usually random strings.
+
+CLIENT_SECRET_GENERATOR_CLASS
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+The import string of the class responsible for generating client secrets.
+These are usually random strings.
+
+CLIENT_SECRET_GENERATOR_LENGTH
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+The length of the generated secrets, in characters. If this value is too low,
+secrets may become subject to bruteforce guessing.
+
+OAUTH2_VALIDATOR_CLASS
+~~~~~~~~~~~~~~~~~~~~~~
+The import string of the ``oauthlib.oauth2.RequestValidator`` subclass that
+validates every step of the OAuth2 process.
+
+SCOPES
+~~~~~~
+A dictionnary mapping each scope name to its human description.
+
+READ_SCOPE
+~~~~~~~~~~
+The name of the *read* scope.
+
+WRITE_SCOPE
+~~~~~~~~~~~
+The name of the *write* scope.
+
+REQUEST_APPROVAL_PROMPT
+~~~~~~~~~~~~~~~~~~~~~~~
+Can be ``'force'`` or ``'auto'``.
+The strategy used to display the authorization form. Refer to :ref:`skip-auth-form`.
+