prosody-modules
2bb29ece216b
README

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

File

README @ 5193:2bb29ece216b

mod_http_oauth2: Implement stateless dynamic client registration Replaces previous explicit registration that required either the additional module mod_adhoc_oauth2_client or manually editing the database. That method was enough to have something to test with, but would not probably not scale easily. Dynamic client registration allows creating clients on the fly, which may be even easier in theory. In order to not allow basically unauthenticated writes to the database, we implement a stateless model here. per_host_key := HMAC(config -> oauth2_registration_key, hostname) client_id := JWT { client metadata } signed with per_host_key client_secret := HMAC(per_host_key, client_id) This should ensure everything we need to know is part of the client_id, allowing redirects etc to be validated, and the client_secret can be validated with only the client_id and the per_host_key. A nonce injected into the client_id JWT should ensure nobody can submit the same client metadata and retrieve the same client_secret
author Kim Alvefur <zash@zash.se>
date Fri, 03 Mar 2023 21:14:19 +0100
parent 2936:4fed2379f5be
line wrap: on
line source

prosody-modules
===============

*Add-on modules for Prosody IM Server*

--------------------------------------------------------------------------

Community repository for non-core, unofficial and/or experimental plugins 
for [Prosody][].

If you are a developer and would like to host your Prosody module in this 
repository, or want to contribute to existing modules, simply introduce 
yourself and request commit access on our [mailing list][].

Notes for users
----------------

There are lots of fun and exciting modules to be found here, we know 
you'll like it.  However please note that each module is in a different 
state of development.  Some are proof-of-concept, others are quite stable 
and ready for production use.  Be sure to read the wiki page of any 
module before installing it on your server.

We are working on methods to easily download and install modules from 
this repository.  In the meantime most modules are either a single file 
and easy to install, or contain installation instructions on their wiki 
page.  You can browse the files stored in this repository at 
<https://hg.prosody.im/prosody-modules>.

[Prosody]: https://prosody.im/
[mailing list]: https://prosody.im/discuss