Software / code / prosody-modules
Annotate
mod_invite/README.md @ 6191:94399ad6b5ab
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:13:39 +0000 |
| parent | 6003:fe081789f7b5 |
| rev | line source |
|---|---|
| 2059 | 1 --- |
| 2 labels: | |
|
4099
78b7879a04f7
mod_invite: Add deprecation note and tag
Matthew Wild <mwild1@gmail.com>
parents:
2059
diff
changeset
|
3 - 'Stage-Deprecated' |
| 2059 | 4 summary: 'Allows users to invite new users' |
| 5 ... | |
| 6 | |
|
4099
78b7879a04f7
mod_invite: Add deprecation note and tag
Matthew Wild <mwild1@gmail.com>
parents:
2059
diff
changeset
|
7 **NOTE:** This module has been deprecated. Its functionality has been |
|
78b7879a04f7
mod_invite: Add deprecation note and tag
Matthew Wild <mwild1@gmail.com>
parents:
2059
diff
changeset
|
8 moved to other modules, see the mod_invites documentation for details. |
|
78b7879a04f7
mod_invite: Add deprecation note and tag
Matthew Wild <mwild1@gmail.com>
parents:
2059
diff
changeset
|
9 |
| 2059 | 10 Introduction |
| 11 ============ | |
| 12 | |
| 13 This module allows users with an account to generate single-use invite URLs | |
| 14 using an ad-hoc command. The invite URLs allow new users to create an account | |
| 15 even if public registration is disabled. | |
| 16 | |
| 17 After the account is created, the inviter and the invitee are automatically | |
| 18 added to the other's roster. The inviter of a user is stored, so can be used | |
| 19 later (for example, for detecting spammers). | |
| 20 | |
| 21 This module depends on Prosody's internal webserver. | |
| 22 | |
| 23 Compatibility | |
| 24 ============= | |
| 25 | |
| 26 ----- ------- | |
| 27 0.9 Works | |
| 28 ----- ------- |
