Software /
code /
prosody-modules
File
mod_auto_activate_hosts/README.markdown @ 5623:59d5fc50f602
mod_http_oauth2: Implement refresh token rotation
Makes refresh tokens one-time-use, handing out a new refresh token with
each access token. Thus if a refresh token is stolen and used by an
attacker, the next time the legitimate client tries to use the previous
refresh token, it will not work and the attack will be noticed. If the
attacker does not use the refresh token, it becomes invalid after the
legitimate client uses it.
This behavior is recommended by draft-ietf-oauth-security-topics
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 23 Jul 2023 02:56:08 +0200 |
parent | 1803:4d73a1a6ba68 |
line wrap: on
line source
--- labels: - 'Stage-Beta' summary: 'Automatically activate/deactivate hosts on reload' ... Introduction ============ By default Prosody does not automatically activate/deactivate hosts when they are added to and removed from the configuration. This module will activate/deactivate hosts as necessary when the configuration is reloaded. This module was sponsored by [Exa Networks](http://exa-networks.co.uk/). Configuration ============= Add the module to your **global** modules\_enabled list: modules_enabled = { ... "auto_activate_hosts"; ... } There are no configuration options for this module. Compatibility ============= ----- ------- 0.9 Works ----- -------