Software /
code /
prosody-modules
Annotate
mod_sasl2_sm/README.md @ 5461:06640647d193
mod_http_oauth2: Fix use of arbitrary ports in loopback redirect URIs
Per draft-ietf-oauth-v2-1-08#section-8.4.2
> The authorization server MUST allow any port to be specified at the
> time of the request for loopback IP redirect URIs, to accommodate
> clients that obtain an available ephemeral port from the operating
> system at the time of the request.
Uncertain if it should normalize the host part, but it also seems
harmless to treat IPv6 and IPv4 the same here.
One thing is that "localhost" is NOT RECOMMENDED because it can
sometimes be pointed to non-loopback interfaces via DNS or hosts file.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Wed, 17 May 2023 13:51:30 +0200 |
parent | 5094:c92c87daa09e |
rev | line source |
---|---|
5026
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
1 --- |
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
2 labels: |
5091
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
3 - Stage-Beta |
5026
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
4 summary: "XEP-0198 integration with SASL2" |
5094
c92c87daa09e
mod_sasl2_sm: Add explicit dependency on mod_sasl2
Kim Alvefur <zash@zash.se>
parents:
5091
diff
changeset
|
5 rockspec: |
c92c87daa09e
mod_sasl2_sm: Add explicit dependency on mod_sasl2
Kim Alvefur <zash@zash.se>
parents:
5091
diff
changeset
|
6 dependencies: |
c92c87daa09e
mod_sasl2_sm: Add explicit dependency on mod_sasl2
Kim Alvefur <zash@zash.se>
parents:
5091
diff
changeset
|
7 - mod_sasl2 |
5026
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
8 --- |
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
9 |
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
10 Add support for inlining stream management negotiation into the SASL2 process. |
5091
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
11 |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
12 **Note: At the time of writing (November 2022), this module implements a |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
13 version of XEP-0198 that is still working its way through the XSF standards |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
14 process. For more information and current status, see [PR #1215](https://github.com/xsf/xeps/pull/1215).** |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
15 |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
16 This module depends on [mod_sasl2] and [mod_sasl2_bind2]. It exposes no |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
17 configuration options. |