mod_http_oauth2: Enforce response type encoded in client_id The client promises to only use this response type, so we should hold them to that. This makes it fail earlier if the response type is disabled or the client is trying to use one that it promised not to use. Better than failing after login and consent.

---
summary: Remote Roster Management
...

Introduction
============

This module adds support for [XEP-0321: Remote Roster Management] which
is commonly used to allow components such as transports to modify the
rosters of local users.