Software /
code /
prosody-modules
Annotate
mod_sasl2_sm/README.md @ 5390:f2363e6d9a64
mod_http_oauth2: Advertise the currently supported id_token signing algorithm
This field is REQUIRED. The algorithm RS256 MUST be included, but isn't
because we don't implement it, as that would require implementing a pile
of additional cryptography and JWT stuff. Instead the id_token is
signed using the client secret, which allows verification by the client,
since it's a shared secret per OpenID Connect Core 1.0 § 10.1 under
Symmetric Signatures.
OpenID Connect Discovery 1.0 has a lot of REQUIRED and MUST clauses that
are not supported here, but that's okay because this is served from the
RFC 8414 OAuth 2.0 Authorization Server Metadata .well-known endpoint!
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 30 Apr 2023 16:13:40 +0200 |
parent | 5094:c92c87daa09e |
rev | line source |
---|---|
5026
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
1 --- |
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
2 labels: |
5091
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
3 - Stage-Beta |
5026
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
4 summary: "XEP-0198 integration with SASL2" |
5094
c92c87daa09e
mod_sasl2_sm: Add explicit dependency on mod_sasl2
Kim Alvefur <zash@zash.se>
parents:
5091
diff
changeset
|
5 rockspec: |
c92c87daa09e
mod_sasl2_sm: Add explicit dependency on mod_sasl2
Kim Alvefur <zash@zash.se>
parents:
5091
diff
changeset
|
6 dependencies: |
c92c87daa09e
mod_sasl2_sm: Add explicit dependency on mod_sasl2
Kim Alvefur <zash@zash.se>
parents:
5091
diff
changeset
|
7 - mod_sasl2 |
5026
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
8 --- |
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
9 |
e3248d025d34
mod_sasl2_sm: Experimental mod_isr alternative
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
10 Add support for inlining stream management negotiation into the SASL2 process. |
5091
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
11 |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
12 **Note: At the time of writing (November 2022), this module implements a |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
13 version of XEP-0198 that is still working its way through the XSF standards |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
14 process. For more information and current status, see [PR #1215](https://github.com/xsf/xeps/pull/1215).** |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
15 |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
16 This module depends on [mod_sasl2] and [mod_sasl2_bind2]. It exposes no |
ec9bca2ac2b5
mod_sasl2_sm: Update README with current information
Matthew Wild <mwild1@gmail.com>
parents:
5026
diff
changeset
|
17 configuration options. |