Comparison

mod_http_oauth2: Log flows enabled and disabled If a developer ever wants to be sure what the state is

comparison

equal deleted inserted replaced

-:c24a622a7b85
+:ac252db71027
 end
 local allowed_grant_type_handlers = module:get_option_set("allowed_oauth2_grant_types", {"authorization_code", "password"})
 for handler_type in pairs(grant_type_handlers) do
 	if not allowed_grant_type_handlers:contains(handler_type) then
+		module:log("debug", "Grant type %q disabled", handler_type);
 		grant_type_handlers[handler_type] = nil;
+	else
+		module:log("debug", "Grant type %q enabled", handler_type);
 	end
 end
 -- "token" aka implicit flow is considered insecure
 local allowed_response_type_handlers = module:get_option_set("allowed_oauth2_response_types", {"code"})
 for handler_type in pairs(response_type_handlers) do
 	if not allowed_response_type_handlers:contains(handler_type) then
+		module:log("debug", "Response type %q disabled", handler_type);
 		grant_type_handlers[handler_type] = nil;
+	else
+		module:log("debug", "Response type %q enabled", handler_type);
 	end
 end
 function handle_token_grant(event)
 	local credentials = get_request_credentials(event.request);