mod_http_oauth2: Bind refresh tokens to client Prevent one OAuth client from using the refresh tokens issued to another client as required by RFC 6819 section 5.2.2.2 See also draft-ietf-oauth-security-topics-22 section 2.2.2 Thanks to OAuch for pointing out this issue

---
labels:
- Stage-Alpha
rockspec:
  dependencies:
  - mod_sasl2
summary: "XEP-0386: Bind 2.0"
---

Experimental early implementation of [XEP-0386: Bind 2.0] for use with
[mod_sasl2].