Annotate

mod_tlsfail/mod_tlsfail.lua @ 5390:f2363e6d9a64

mod_http_oauth2: Advertise the currently supported id_token signing algorithm This field is REQUIRED. The algorithm RS256 MUST be included, but isn't because we don't implement it, as that would require implementing a pile of additional cryptography and JWT stuff. Instead the id_token is signed using the client secret, which allows verification by the client, since it's a shared secret per OpenID Connect Core 1.0 § 10.1 under Symmetric Signatures. OpenID Connect Discovery 1.0 has a lot of REQUIRED and MUST clauses that are not supported here, but that's okay because this is served from the RFC 8414 OAuth 2.0 Authorization Server Metadata .well-known endpoint!
author Kim Alvefur <zash@zash.se>
date Sun, 30 Apr 2023 16:13:40 +0200 (21 months ago)
parent 4702:7009e16192fa
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
4434
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 local st = require "util.stanza";
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 local xmlns_starttls = 'urn:ietf:params:xml:ns:xmpp-tls';
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 local starttls_attr = { xmlns = xmlns_starttls };
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 local s2s_feature = st.stanza("starttls", starttls_attr);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 local starttls_failure = st.stanza("failure", starttls_attr);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7
4702
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
8 module:hook("stream-features", function(event)
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
9 local features = event.features;
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
10 features:add_child(s2s_feature);
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
11 end);
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
12
4434
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
13 module:hook("s2s-stream-features", function(event)
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
14 local features = event.features;
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
15 features:add_child(s2s_feature);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16 end);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
17
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
18 -- Hook <starttls/>
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
19 module:hook("stanza/urn:ietf:params:xml:ns:xmpp-tls:starttls", function(event)
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
20 local origin = event.origin;
4702
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
21 (origin.sends2s or origin.send)(starttls_failure);
4434
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
22 origin:close();
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
23 return true;
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
24 end);