mod_http_oauth2: Strip unknown extra fields from client registration We shouldn't sign things we don't understand! RFC 7591 section-2 states: > The authorization server MUST ignore any client metadata sent by the > client that it does not understand (for instance, by silently removing > unknown metadata from the client's registration record during > processing). Prevents grandfathering in of unvalidated data that might become used later, especially since the 'additionalProperties' schema keyword was removed in 698fef74ce53

---
labels:
...

Introduction
============

mod\_net\_dovecotauth is a server implementation of the Dovecot
authentication protocol. It allows you to authenticate e.g. Postfix
against your Prosody installation.

Due to missing support for virtal hosts in this protocol, only one host
can be supported.

Configuration
=============

Install and add to modules\_enabled like any other module.

    dovecotauth_host = "example.com" -- Must be a defined VirtualHost

Compatibility
=============

Works with 0.9