mod_http_oauth2: Validate redirect URI depending on application type Per https://openid.net/specs/openid-connect-registration-1_0.html require that web applications use https:// and native applications must use either http://localhost or a custom (non-https) URI. Previous requirement that hostname matches that of client_uri is kept for web applications.

module:depends("smacks");

module:hook("smacks-ack-delayed", function (event)
	if event.origin.type == "s2sin" or event.origin.type == "s2sout" then
		event.origin:close("connection-timeout");
		return true;
	end
end);