Software /
code /
prosody-modules
File
mod_alias/mod_alias_postfixadmin.sh @ 5404:1087f697c3f3
mod_http_oauth2: Strip unknown extra fields from client registration
We shouldn't sign things we don't understand!
RFC 7591 section-2 states:
> The authorization server MUST ignore any client metadata sent by the
> client that it does not understand (for instance, by silently removing
> unknown metadata from the client's registration record during
> processing).
Prevents grandfathering in of unvalidated data that might become used
later, especially since the 'additionalProperties' schema keyword was
removed in 698fef74ce53
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:23:40 +0200 |
parent | 1953:0c3ba5ff7a3b |
line wrap: on
line source
#!/bin/sh # Copyright (C) 2015 Travis Burtrum # This file is MIT/X11 licensed. # run like ./mod_alias_postfixadmin.sh "mysql -N -upostfixadmin -ppostfixadmin postfixadmin" > /etc/prosody/aliases.cfg.lua # then put: # Include "aliases.cfg.lua" # in prosody.cfg.lua mysql="$1" echo "-- alias plugin, generated by mod_alias_postfixadmin.sh" echo "aliases = {" echo "SELECT concat('["'"'"', address, '"'"'"] = "'"'"', goto, '"'"'";') FROM alias WHERE address != goto; SELECT concat('["'"'"', address, '"'"'"] = "'"'"', goto, '"'"'";') FROM ( select replace(address, concat('@', target_domain), concat('@', alias_domain)) as address, goto FROM alias JOIN alias_domain ON alias_domain.target_domain = SUBSTRING(alias.address, locate('@',alias.address) + 1, length(alias.address)) ) a WHERE a.address != a.goto;" | $mysql | sort | uniq echo "}"