# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1684264255 -7200
# Node ID 9008aea491bfde3526d57ce6412ee8aa86f37e96
# Parent  80a81e7f3c4e4845dc8920768be7f7f48bd0a5dc
mod_http_oauth2: Reject duplicate list items in client registration

Useless waste of space

diff -r 80a81e7f3c4e -r 9008aea491bf mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Tue May 16 21:09:38 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Tue May 16 21:10:55 2023 +0200
@@ -763,6 +763,7 @@
 		grant_types = {
 			type = "array";
 			minItems = 1;
+			uniqueItems = true;
 			items = {
 				type = "string";
 				enum = {
@@ -778,7 +779,13 @@
 			default = { "authorization_code" };
 		};
 		application_type = { type = "string"; enum = { "native"; "web" }; default = "web" };
-		response_types = { type = "array"; minItems = 1; items = { type = "string"; enum = { "code"; "token" } }; default = { "code" } };
+		response_types = {
+			type = "array";
+			minItems = 1;
+			uniqueItems = true;
+			items = { type = "string"; enum = { "code"; "token" } };
+			default = { "code" };
+		};
 		client_name = { type = "string" };
 		client_uri = { type = "string"; format = "uri"; luaPattern = "^https:" };
 		logo_uri = { type = "string"; format = "uri"; luaPattern = "^https:" };