Software /
code /
prosody-modules
Annotate
mod_sasl2/README.md @ 6193:e977174082ee
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Thu, 06 Feb 2025 10:24:30 +0000 |
parent | 6061:26bfcb442138 |
rev | line source |
---|---|
4798 | 1 --- |
2 labels: | |
5089
5b77f4720bfe
mod_sasl2: Update and expand README with more (and updated) information
Matthew Wild <mwild1@gmail.com>
parents:
5064
diff
changeset
|
3 - Stage-Beta |
4798 | 4 summary: "XEP-0388: Extensible SASL Profile" |
5 --- | |
6 | |
6061
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
7 Implementation of [XEP-0388: Extensible SASL Profile]. |
5089
5b77f4720bfe
mod_sasl2: Update and expand README with more (and updated) information
Matthew Wild <mwild1@gmail.com>
parents:
5064
diff
changeset
|
8 |
5b77f4720bfe
mod_sasl2: Update and expand README with more (and updated) information
Matthew Wild <mwild1@gmail.com>
parents:
5064
diff
changeset
|
9 ## Configuration |
5b77f4720bfe
mod_sasl2: Update and expand README with more (and updated) information
Matthew Wild <mwild1@gmail.com>
parents:
5064
diff
changeset
|
10 |
5b77f4720bfe
mod_sasl2: Update and expand README with more (and updated) information
Matthew Wild <mwild1@gmail.com>
parents:
5064
diff
changeset
|
11 This module honours the same configuration options as Prosody's existing |
5b77f4720bfe
mod_sasl2: Update and expand README with more (and updated) information
Matthew Wild <mwild1@gmail.com>
parents:
5064
diff
changeset
|
12 [mod_saslauth](https://prosody.im/doc/modules/mod_saslauth). |
5064
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
13 |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
14 ## Developers |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
15 |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
16 mod_sasl2 provides some events you can hook to affect aspects of the |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
17 authentication process: |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
18 |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
19 - `advertise-sasl-features` |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
20 - `sasl2/c2s/success` |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
21 - Priority 1000: Session marked as authenticated, success response created (`event.success`) |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
22 - Priority -1000: Success response sent to client |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
23 - Priority -1500: Updated <stream-features/> sent to client |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
24 - `sasl2/c2s/failure` |
7d33178c79f2
mod_sasl2: Add some brief dev notes about events to the README
Matthew Wild <mwild1@gmail.com>
parents:
4798
diff
changeset
|
25 - `sasl2/c2s/error` |
5965
da942a3f3660
mod_sasl2: Clarify that this module requires Prosody trunk
Kim Alvefur <zash@zash.se>
parents:
5089
diff
changeset
|
26 |
da942a3f3660
mod_sasl2: Clarify that this module requires Prosody trunk
Kim Alvefur <zash@zash.se>
parents:
5089
diff
changeset
|
27 # Compatibility |
da942a3f3660
mod_sasl2: Clarify that this module requires Prosody trunk
Kim Alvefur <zash@zash.se>
parents:
5089
diff
changeset
|
28 |
da942a3f3660
mod_sasl2: Clarify that this module requires Prosody trunk
Kim Alvefur <zash@zash.se>
parents:
5089
diff
changeset
|
29 This module requires Prosody **trunk** and is not compatible with 0.12 or older versions. |
da942a3f3660
mod_sasl2: Clarify that this module requires Prosody trunk
Kim Alvefur <zash@zash.se>
parents:
5089
diff
changeset
|
30 |
6061
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
31 |
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
32 Prosody Version Status |
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
33 ----------------------- ---------------- |
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
34 trunk as of 2024-11-24 Works |
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
35 0.12 Does not work |
26bfcb442138
mod_sasl2: update README.md, the mentioned xep is stable now and not in the inbox anymore.
Menel <menel@snikket.de>
parents:
5965
diff
changeset
|
36 ----------------------- ---------------- |