mod_http_oauth2: Do not enforce PKCE on Device and OOB flows PKCE does not appear to be used with the Device flow. I have found no mention of any interaction between those standards. Since no data is delivered via redirects in these cases, PKCE may not serve any purpose. This is mostly a problem because we reuse the authorization code to implement the Device and OOB flows.

---
labels:
- 'Stage-Obsolete'
---

::: {.alert .alert-warning}
As of Prosody 0.12.x, `prosodyctl shell user list HOST` can be used
instead of this module.
:::

This module adds a command to `prosodyctl` for listing users.

``` sh
prosodyctl mod_listusers
```