Annotate

mod_s2s_smacks_timeout/mod_s2s_smacks_timeout.lua @ 5819:93d6e9026c1b

mod_http_oauth2: Do not enforce PKCE on Device and OOB flows PKCE does not appear to be used with the Device flow. I have found no mention of any interaction between those standards. Since no data is delivered via redirects in these cases, PKCE may not serve any purpose. This is mostly a problem because we reuse the authorization code to implement the Device and OOB flows.
author Kim Alvefur <zash@zash.se>
date Fri, 15 Dec 2023 12:10:07 +0100
parent 4981:f0fe95f9e21c
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
4981
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 module:depends("smacks");
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 module:hook("smacks-ack-delayed", function (event)
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 if event.origin.type == "s2sin" or event.origin.type == "s2sout" then
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 event.origin:close("connection-timeout");
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 return true;
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 end
f0fe95f9e21c mod_s2s_smacks_timeout: Use mod_smacks to close stale s2s connections
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 end);