File

mod_http_oauth2: Shorten default token validity periods With refresh tokens, short lifetime for access tokens is not a problem. The arbitrary choice of one hour seems reasonable. RFC 6749 has it as example value. One week for refresh tokens matching the default archive retention period. This means that a client that remains unused for one week will have to sign in again. An actively used client will continually push that forward with each used refresh token.

Over the years, some servers stop working for various reasons, and leave
behind broken roster subscriptions that trigger failing s2s connections.
This module allows cleaning up such cases by unsubscribing local users
from their contacts on those servers. Also works for typos and the like.
Use with care.

```lua
Component "gmail.com" "unsubscriber"
```