Software /
code /
prosody-modules
File
misc/upstart/prosody.conf @ 5512:1fbc8718bed6
mod_http_oauth2: Bind refresh tokens to client
Prevent one OAuth client from using the refresh tokens issued to another
client as required by RFC 6819 section 5.2.2.2
See also draft-ietf-oauth-security-topics-22 section 2.2.2
Thanks to OAuch for pointing out this issue
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 02 Jun 2023 10:40:48 +0200 |
parent | 2610:68b56506fa50 |
line wrap: on
line source
author "Kim Alvefur <zash@zash.se>" description "Prosody XMPP server" # Normal runlevel based start and stop start on runlevel [2345] stop on runlevel [!2345] # Alternate method for starting and stopping # when a network interface comes and goes # # start on net-device-up IFACE=eth0 # stop on net-device-down IFACE=eth0 # Change user so Prosdy doesn't have to setgid prosody setuid prosody # Set a sensible umask umask 0027 # Run prosody exec /usr/bin/prosody # Collect stdout into a log file console log # Restart on crashes respawn respawn limit 5 10