Software / code / prosody-modules
Annotate
mod_proxy65_whitelist/README.md @ 6193:e977174082ee
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:24:30 +0000 |
| parent | 6003:fe081789f7b5 |
| rev | line source |
|---|---|
|
1820
8de50be756e5
Various README files: Correct indentation levels, fix syntax and other small fixes
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
1 --- |
|
5923
694b62d8a82f
various/README: Fix 'labels' metadata, should be a list
Kim Alvefur <zash@zash.se>
parents:
1820
diff
changeset
|
2 labels: |
|
694b62d8a82f
various/README: Fix 'labels' metadata, should be a list
Kim Alvefur <zash@zash.se>
parents:
1820
diff
changeset
|
3 - Stage-Alpha |
| 1803 | 4 summary: Limit which file transfer users can use |
| 5 ... | |
| 6 | |
| 7 Introduction | |
| 8 ------------ | |
| 9 | |
| 10 This module attempts to restrict use of non-whitelisted XEP-0065 | |
| 11 proxies. | |
| 12 | |
| 13 Configuration | |
| 14 ------------- | |
| 15 | |
| 16 Without any options, the module will restrict users to local [proxy65 | |
| 17 components](https://prosody.im/doc/modules/mod_proxy65). | |
| 18 | |
| 19 -- additional proxies to allow | |
| 20 allowed_streamhosts = { "proxy.eu.jabber.org" } | |
| 21 | |
| 22 The module will add all local proxies to that list. To prevent it from | |
| 23 doing that, set | |
| 24 | |
| 25 allow_local_streamhosts = false |
