Annotate
mod_statistics/README.md @ 6193:e977174082ee
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do
| author |
Matthew Wild <mwild1@gmail.com> |
| date |
Thu, 06 Feb 2025 10:24:30 +0000 |
| parent |
6097:ecb677f89d7e |
| rev |
line source |
|
6097
|
1 ---
|
|
|
2 labels:
|
|
|
3 - Stage-Broken
|
|
|
4 - Statistics
|
|
|
5 summary: A rough 'prosodyctl mod_statistics top'
|
|
|
6 ...
|
|
|
7
|
|
|
8 ::: {.alert .alert-warning}
|
|
|
9 This module was an early protoype and is [not compatible with prosody anymore.](https://issues.prosody.im/647)
|
|
|
10 :::
|
|
|
11
|
|
|
12 # Compatibility
|
|
|
13
|
|
|
14 version status
|
|
|
15 -------- -------
|
|
|
16 trunk broken
|
|
|
17 0.12 broken
|
|
|
18 0.11 works
|
