diff mod_http_oauth2/mod_http_oauth2.lua @ 5198:2e8a7a0f932d

mod_http_oauth2: Fix response type config Wrong variable names
author Kim Alvefur <zash@zash.se>
date Fri, 03 Mar 2023 22:48:38 +0100
parents 6b63af56c8ac
children f48628dc83f1
line wrap: on
line diff
--- a/mod_http_oauth2/mod_http_oauth2.lua	Fri Mar 03 22:48:14 2023 +0100
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Fri Mar 03 22:48:38 2023 +0100
@@ -291,8 +291,8 @@
 
 -- "token" aka implicit flow is considered insecure
 local allowed_response_type_handlers = module:get_option_set("allowed_oauth2_response_types", {"code"})
-for handler_type in pairs(allowed_response_type_handlers) do
-	if not allowed_grant_type_handlers:contains(handler_type) then
+for handler_type in pairs(response_type_handlers) do
+	if not allowed_response_type_handlers:contains(handler_type) then
 		grant_type_handlers[handler_type] = nil;
 	end
 end