mod_auth_oauthbearer uses blocking HTTP calls
Problem
The authentication module in use here uses a blocking synchronous HTTP API, instead of the native asynchronous HTTP API that is built into Prosody.
Side-effects
The server will slow dramatically if there are lots of authentications happening, or if one of the HTTP endpoints is down, slow or unreachable.
Solution
The module should be rewritten with an asynchronous design, using Prosody's native HTTP API. This will make it more scalable, and prevent it from being able to stall the server (as happened in applications/hubl#894 (closed) ).