File

mod_http_oauth2: Make note about handling repeated RFC 6749 states > If an authorization code is used more than once, the authorization > server MUST deny the request and SHOULD revoke (when possible) all > tokens previously issued based on that authorization code. We should follow the SHOULD. The MUST is already covered by removing the code state from the cache.

This module lets you block connections to remote servers at the s2s
level.

``` {.lua}
modules_enabled = {
    -- other modules --
    "s2s_blacklist",

}
s2s_blacklist = {
    "proxy.eu.jabber.org",
}
```