# HG changeset patch # User Kim Alvefur # Date 1677880118 -3600 # Node ID 2e8a7a0f932dfcdf8288dd9e71cbdab28df8f4d2 # Parent 164a9875935bdca14b343c81f86006708cf2a324 mod_http_oauth2: Fix response type config Wrong variable names diff -r 164a9875935b -r 2e8a7a0f932d mod_http_oauth2/mod_http_oauth2.lua --- a/mod_http_oauth2/mod_http_oauth2.lua Fri Mar 03 22:48:14 2023 +0100 +++ b/mod_http_oauth2/mod_http_oauth2.lua Fri Mar 03 22:48:38 2023 +0100 @@ -291,8 +291,8 @@ -- "token" aka implicit flow is considered insecure local allowed_response_type_handlers = module:get_option_set("allowed_oauth2_response_types", {"code"}) -for handler_type in pairs(allowed_response_type_handlers) do - if not allowed_grant_type_handlers:contains(handler_type) then +for handler_type in pairs(response_type_handlers) do + if not allowed_response_type_handlers:contains(handler_type) then grant_type_handlers[handler_type] = nil; end end