# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1683034896 -7200
# Node ID 18b57e91b5e5ecc6f936496d6612bdf9ec59719b
# Parent  ac7c5669e5f5f6154121888ba5563c7d93560238
mod_http_oauth2: Advertise revocation endpoint in metadata

How were you supposed to know this was supported otherwise?

It support Basic auth and ... none?

diff -r ac7c5669e5f5 -r 18b57e91b5e5 mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Sun Apr 30 17:04:55 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Tue May 02 15:41:36 2023 +0200
@@ -953,6 +953,8 @@
 				scopes_supported = usermanager.get_all_roles and array(it.keys(usermanager.get_all_roles(module.host))):append(array(openid_claims:items()));
 				response_types_supported = array(it.keys(response_type_handlers));
 				token_endpoint_auth_methods_supported = array({ "client_secret_post"; "client_secret_basic" });
+				revocation_endpoint = handle_revocation_request and module:http_url() .. "/revoke" or nil;
+				revocation_endpoint_auth_methods_supported = array({ "client_secret_basic" });
 				code_challenge_methods_supported = array(it.keys(verifier_transforms));
 				authorization_response_iss_parameter_supported = true;