mod_http_oauth2: Make note about handling repeated RFC 6749 states > If an authorization code is used more than once, the authorization > server MUST deny the request and SHOULD revoke (when possible) all > tokens previously issued based on that authorization code. We should follow the SHOULD. The MUST is already covered by removing the code state from the cache.

This module helps reduces power usage of inactive mobile clients while
another client is actively used. E.g. in the case of chatting on a
desktop computer, instantly pushing messages to a phone in someones
pocket is not the best use of radio time.

Works with [mod_csi_simple][doc:modules:mod_csi_simple] which is
included with Prosody since 0.11