Software / code / prosody-modules
Annotate
mod_s2soutinjection/README.md @ 6193:e977174082ee
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:24:30 +0000 |
| parent | 6003:fe081789f7b5 |
| rev | line source |
|---|---|
| 1999 | 1 --- |
| 2 summary: S2S connection override | |
| 3 ... | |
| 4 | |
| 5 # Introduction | |
| 6 | |
| 7 This module is similar to [mod\_srvinjection] but less of an hack. | |
| 8 | |
| 9 # Configuration | |
| 10 | |
| 11 ``` lua | |
| 12 -- In the global section | |
| 13 | |
| 14 modules_enabled = { | |
| 15 --- your other modules | |
| 16 "s2soutinjection"; | |
| 17 } | |
| 18 | |
|
4931
f4a9e804c457
mod_s2soutinjection: Rewrite based on mod_onions for 0.12 compat (thanks Zash)
moparisthebest <admin@moparisthebest.com>
parents:
1999
diff
changeset
|
19 -- targets must be IPs, not hostnames |
| 1999 | 20 s2s_connect_overrides = { |
| 21 -- This one will use the default port, 5269 | |
|
4931
f4a9e804c457
mod_s2soutinjection: Rewrite based on mod_onions for 0.12 compat (thanks Zash)
moparisthebest <admin@moparisthebest.com>
parents:
1999
diff
changeset
|
22 ["example.com"] = "1.2.3.4"; |
| 1999 | 23 |
| 24 -- To set a different port: | |
|
4931
f4a9e804c457
mod_s2soutinjection: Rewrite based on mod_onions for 0.12 compat (thanks Zash)
moparisthebest <admin@moparisthebest.com>
parents:
1999
diff
changeset
|
25 ["another.example"] = { "127.0.0.1", 9999 }; |
| 1999 | 26 } |
| 27 ``` | |
| 28 | |
| 29 # Compatibility | |
| 30 | |
|
4931
f4a9e804c457
mod_s2soutinjection: Rewrite based on mod_onions for 0.12 compat (thanks Zash)
moparisthebest <admin@moparisthebest.com>
parents:
1999
diff
changeset
|
31 Requires 0.9.x or later. Tested on 0.12.0 |
