Haisheng

Keep error Path when wrapping error list

2

`dfChildErrorList` only list all error message without each error Path. I think it is better to keep the Path, for instance, put the Path as a attribute of `li` element....

PCKE

3

https://www.oauth.com/oauth2-servers/pkce/

Change from `Maybe (URIRef Absolute)` to `(URIRef Absolute)`

Refactor OAuth2 to have base url

2

add base uri

- https://github.com/freizl/hoauth2/pull/61 - Why `OAuth2Error error` instead of `OAuth2Error` ? - looks like was trying to use same data type for both Auth code error and Token request error. -...

- keep standard way to request access token and auth request in `HttpClient.hs` - move none-standard ways to `x.y.z.Extra.hs` - only take care request (JSON or FORM post) and response...

CSRF

1

- https://tools.ietf.org/html/rfc6749#section-10.12 - either allow consumer to specific its own state or generate one by default.

Service Account

11

> Damian Soriano (Gmail) to me Aug 8 > Hi! > > I am creating a Haskell application that connects go bigquery. I wanted to use your OAuth2 lib to...

Rules for forward proxy

6

Does mighttpd2 already support or will support "forward proxy" functionality? Basically it means when no rules match from route.config, just fetch response from origin server. Thanks.