# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1749327221 -7200
# Node ID 28fd42866be93a0a5fd59e677bf11de76df486e4
# Parent  7cf1fcac9b94a49ff5c66a2d1de12322ba07001f
mod_http_oauth2: Add comment referencing RFC 8176

Took a while to recall where this was defined.

diff -r 7cf1fcac9b94 -r 28fd42866be9 mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Sat Jun 07 22:02:18 2025 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Sat Jun 07 22:13:41 2025 +0200
@@ -1035,7 +1035,7 @@
 		aud = params.client_id;
 		auth_time = auth_state.user.iat;
 		nonce = params.nonce;
-		amr = auth_state.user.amr;
+		amr = auth_state.user.amr; -- RFC 8176: Authentication Method Reference Values
 	});
 	local ret = response_handler(client, params, user_jid, id_token);
 	if errors.is_err(ret) then