mod_http_oauth2: Reject duplicate form-urlencoded parameters Per RFC 6749 section 3.1 > Request and response parameters MUST NOT be included more than once. Thanks to OAuch for pointing out Also cleans up some of the icky behavior of formdecode(), like returning a string if no '=' is included.

---
labels:
- Stage-Alpha
rockspec:
  dependencies:
  - mod_sasl2
summary: "XEP-0386: Bind 2.0"
---

Experimental early implementation of [XEP-0386: Bind 2.0] for use with
[mod_sasl2].