# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1751549697 -7200
# Node ID 5dc4ec836ce2ba5e2061d45ccc5680160f22580f
# Parent  4f9b42c53d0f24a568059703731028a239ff864c
mod_http_oauth2: Comment on origin of a constant URI

diff -r 4f9b42c53d0f -r 5dc4ec836ce2 mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Thu Jul 03 15:34:42 2025 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Thu Jul 03 15:34:57 2025 +0200
@@ -282,6 +282,8 @@
 -- code to the user for them to copy-paste into the client, which can then
 -- continue as if it received it via redirect.
 local oob_uri = "urn:ietf:wg:oauth:2.0:oob";
+
+-- RFC 8628 OAuth 2.0 Device Authorization Grant
 local device_uri = "urn:ietf:params:oauth:grant-type:device_code";
 
 local loopbacks = set.new({ "localhost", "127.0.0.1", "::1" });