mod_http_oauth2: Reduce authorization code validity time to 2 minutes RFC 6749 states > A maximum authorization code lifetime of 10 minutes is RECOMMENDED. So 15 minutes was way too long. I was thinking 5 minutes at first but since this should generally be instant, I settled on 2 minutes as a large guesstimate on how slow it might be on slow links.

---
labels:
- Stage-Alpha
summary: 'Create OAuth2 clients via ad-hoc command'
...

Introduction
============

Allows creating OAuth2 clients for use with [mod_http_oauth2]. Otherwise
a work-in-progress intended for developers only!

Configuration
=============

**TODO**

Compatibility
=============

Probably Prosody trunk.