Software /
code /
prosody-modules
Annotate
mod_proctitle/README.md @ 6193:e977174082ee
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Thu, 06 Feb 2025 10:24:30 +0000 (7 weeks ago) |
parent | 6003:fe081789f7b5 |
rev | line source |
---|---|
1846 | 1 --- |
2 summary: Set process name to prosody | |
3 ... | |
4 | |
5 This module sets the process name to `prosody` so it shows up as such | |
6 instead of `lua` in process management tools. | |
7 | |
8 To use this module, you'll need the proctitle Lua library: | |
1911
0225f2a551d0
mod_proctitle/README: Linkify URL
Kim Alvefur <zash@zash.se>
parents:
1846
diff
changeset
|
9 <https://github.com/hoelzro/lua-proctitle> |