--- a/mod_http_oauth2/README.markdown	Sat Apr 29 13:09:46 2023 +0200
+++ b/mod_http_oauth2/README.markdown	Sat Apr 29 13:09:49 2023 +0200
@@ -129,6 +129,15 @@
 oauth2_require_code_challenge = true
 ```
 
+Further, individual challenge methods can be enabled or disabled:
+
+```lua
+allowed_oauth2_code_challenge_methods = {
+    "plain"; -- the insecure one
+    "S256";
+}
+```
+
 ## Deployment notes
 
 ### Access management