mod_http_oauth2: Allow only l10n variants of name in client metadata
Since "client_name" seems to be the only human readable non-URI property
that makes sense to have localized version of. Therefore it seems
excessive to allow arbitrary additionalProperties.
We don't make use of localized versions of client_name and URIs yet, but
it would be nice to do so.
--- a/mod_http_oauth2/mod_http_oauth2.lua Tue Apr 25 17:16:12 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua Tue Apr 25 17:38:36 2023 +0200
@@ -669,9 +669,11 @@
software_id = { type = "string"; format = "uuid" };
software_version = { type = "string" };
};
- -- Localized versions of descriptive properties and URIs
- luaPatternProperties = { ["^[a-z_]+_uri#"] = { type = "string"; format = "uri"; luaPattern = "^https:" } };
- additionalProperties = { type = "string" };
+ luaPatternProperties = {
+ -- Localized versions of descriptive properties and URIs
+ ["^client_name#"] = { description = "Localized version of 'client_name'"; type = "string" };
+ ["^[a-z_]+_uri#"] = { type = "string"; format = "uri"; luaPattern = "^https:" };
+ };
}
function create_client(client_metadata)