mod_http_oauth2: Strip unknown extra fields from client registration We shouldn't sign things we don't understand! RFC 7591 section-2 states: > The authorization server MUST ignore any client metadata sent by the > client that it does not understand (for instance, by silently removing > unknown metadata from the client's registration record during > processing). Prevents grandfathering in of unvalidated data that might become used later, especially since the 'additionalProperties' schema keyword was removed in 698fef74ce53

body {
  margin: 0
}

a {
  color: #0000FF
}

ul {
  margin: 0
}

.btn {
  margin-right: 0.3em
}

.btn:last {
  margin-right: 0
}

#main {
  padding: 10px
}

#main div {
  margin-left: 14px
}

#main p {
  margin-left: 14px
}

#top {
  clear: both;
  width: 100%;
  padding: 0;
}

#header {
  height: 172px;
  background: url(../images/tile.png) repeat-x
}