File

mod_http_oauth2: Bind refresh tokens to client Prevent one OAuth client from using the refresh tokens issued to another client as required by RFC 6819 section 5.2.2.2 See also draft-ietf-oauth-security-topics-22 section 2.2.2 Thanks to OAuch for pointing out this issue

---
labels:
- 'Stage-Alpha'
summary: Module deprecated, just use mod_smacks
...

Introduction
============

This module is deprecated and superseded by mod_smacks.