# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1606006542 -3600
# Node ID 7b4a73364363edef7e081cfd3efb52f1b8c4f0a1
# Parent  84bdf7e017442a99e6ad4b5432de99f4f6b804f5
mod_http_oauth2: Add TODO

diff -r 84bdf7e01744 -r 7b4a73364363 mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Sun Nov 22 01:54:06 2020 +0100
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Sun Nov 22 01:55:42 2020 +0100
@@ -196,6 +196,7 @@
 	if not user then
 		return 401;
 	end
+	-- TODO ask user for consent here
 	if not request.url.query then
 		response.headers.content_type = "application/json";
 		return oauth_error("invalid_request");