Annotate

mod_register_dnsbl/README.markdown @ 5390:f2363e6d9a64

mod_http_oauth2: Advertise the currently supported id_token signing algorithm This field is REQUIRED. The algorithm RS256 MUST be included, but isn't because we don't implement it, as that would require implementing a pile of additional cryptography and JWT stuff. Instead the id_token is signed using the client secret, which allows verification by the client, since it's a shared secret per OpenID Connect Core 1.0 § 10.1 under Symmetric Signatures. OpenID Connect Discovery 1.0 has a lot of REQUIRED and MUST clauses that are not supported here, but that's okay because this is served from the RFC 8414 OAuth 2.0 Authorization Server Metadata .well-known endpoint!
author Kim Alvefur <zash@zash.se>
date Sun, 30 Apr 2023 16:13:40 +0200
parent 2890:6412595e2046
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
2295
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 Introduction
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2 ============
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3
2890
6412595e2046 mod_register_dnsbl: Use async support in trunk to actually block registration if a positive match is found in the DNSBL
Kim Alvefur <zash@zash.se>
parents: 2295
diff changeset
4 This module checks the IP addresses attempting to register an account
6412595e2046 mod_register_dnsbl: Use async support in trunk to actually block registration if a positive match is found in the DNSBL
Kim Alvefur <zash@zash.se>
parents: 2295
diff changeset
5 against a DNSBL, blocking the attempt if there is a hit.
2295
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 Configuration
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 =============
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10 Option Type Default
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
11 ------------------- -------- ------------
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
12 registration\_rbl string *Required*
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
13
2890
6412595e2046 mod_register_dnsbl: Use async support in trunk to actually block registration if a positive match is found in the DNSBL
Kim Alvefur <zash@zash.se>
parents: 2295
diff changeset
14 Compatibility
6412595e2046 mod_register_dnsbl: Use async support in trunk to actually block registration if a positive match is found in the DNSBL
Kim Alvefur <zash@zash.se>
parents: 2295
diff changeset
15 =============
2295
2d90a2b8482e mod_register_dnsbl: Add README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16
2890
6412595e2046 mod_register_dnsbl: Use async support in trunk to actually block registration if a positive match is found in the DNSBL
Kim Alvefur <zash@zash.se>
parents: 2295
diff changeset
17 Prosody Trunk
6412595e2046 mod_register_dnsbl: Use async support in trunk to actually block registration if a positive match is found in the DNSBL
Kim Alvefur <zash@zash.se>
parents: 2295
diff changeset
18 [1a0b76b07b7a](https://hg.prosody.im/trunk/rev/1a0b76b07b7a) or later.