File

mod_invites_register_api: Use set_password() for password resets Previously the code relied on the (weird) behaviour of create_user(), which would update the password for a user account if it already existed. This has several issues, and we plan to deprecate this behaviour of create_user(). The larger issue is that this route does not trigger the user-password-changed event, which can be a security problem. For example, it did not disconnect existing user sessions (this occurs in mod_c2s in response to the event). Switching to set_password() is the right thing to do.

Developer Utilities/Tests
=========================

This directory exists for reasons of sanity checking.  If you wish
to run the tests, set up Prosody as you normally would, and install the LDAP
modules as normal as well.  Set up OpenLDAP using the configuration directory
found in this directory (slapd.conf), and run the following command to import
the test definitions into the LDAP server:

    ldapadd -x -w prosody -D 'cn=Manager,dc=example,dc=com' -f posix-users.ldif

Then just run prove (you will need perl and AnyEvent::XMPP installed):

    prove t