# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1684263871 -7200
# Node ID 6970c73711c2ae043c05f319ddc88708bccbeb54
# Parent  7dc429b7c3f35fe908ec606f0541d4874d8d061c
mod_http_oauth2: Reject duplicate redirect URIs in registration

diff -r 7dc429b7c3f3 -r 6970c73711c2 mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Tue May 16 20:56:57 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Tue May 16 21:04:31 2023 +0200
@@ -754,7 +754,7 @@
 		"redirect_uris";
 	};
 	properties = {
-		redirect_uris = { type = "array"; minItems = 1; items = { type = "string"; format = "uri" } };
+		redirect_uris = { type = "array"; minItems = 1; uniqueItems = true; items = { type = "string"; format = "uri" } };
 		token_endpoint_auth_method = {
 			type = "string";
 			enum = { "none"; "client_secret_post"; "client_secret_basic" };