mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ) Must have typed text/plain twice by accident here.

mod_http_oauth2: Specify host for which to retrieve list of roles Fixes core/usermanager.lua:299: attempt to index a nil value (field '?')

mod_http_oauth2: Return list of active roles in discovery Relies on Prosody trunk rev cdb996637b08 Better than a hardcoded list

mod_http_oauth2: Return actually enabled response types in discovery

mod_http_oauth2: Calculate client secret expiry in registration response Not actually the client_secret that expires, but the client_id JWT. Returning '0' indicating no expiry was incorrect unless JWT expiry is turned off, which we check for now.

mod_http_oauth2: Strip trailing '/' from issuer URL

mod_http_oauth2: Advertise endpoints that are enabled If you don't set the registration secret, some of these are not actually available, so don't advertise them.

mod_http_oauth2: Separate client_secret verification key from JWT key Allows configuring a real JWT key directly in the config, but the client_secret will be different per host.

mod_http_oauth2: Fix response type config Wrong variable names

mod_http_oauth2/README: Document config options