mod_http_oauth2: Do not enforce PKCE on Device and OOB flows PKCE does not appear to be used with the Device flow. I have found no mention of any interaction between those standards. Since no data is delivered via redirects in these cases, PKCE may not serve any purpose. This is mostly a problem because we reuse the authorization code to implement the Device and OOB flows.

This module lets you block connections to remote servers at the s2s
level.

``` {.lua}
modules_enabled = {
    -- other modules --
    "s2s_blacklist",

}
s2s_blacklist = {
    "proxy.eu.jabber.org",
}
```