mod_http_oauth2: Strip unknown extra fields from client registration We shouldn't sign things we don't understand! RFC 7591 section-2 states: > The authorization server MUST ignore any client metadata sent by the > client that it does not understand (for instance, by silently removing > unknown metadata from the client's registration record during > processing). Prevents grandfathering in of unvalidated data that might become used later, especially since the 'additionalProperties' schema keyword was removed in 698fef74ce53

local dataforms = require "util.dataforms";

local form_layout = dataforms.new({
	{ type = "hidden"; var = "FORM_TYPE"; value = "urn:xmpp:sos:0" };
	{ type = "list-multi"; name = "addrs"; var = "external-status-addresses" };
});

local addresses = module:get_option_array("outage_status_urls");
module:add_extension(form_layout:form({ addrs = addresses }, "result"));