prosody-modules
94399ad6b5ab
mod_muc_gc10/README.md
Software / code / prosody-modules
File
mod_muc_gc10/README.md @ 6191:94399ad6b5ab
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:13:39 +0000 |
| parent | 6003:fe081789f7b5 |
line wrap: on
line source
# Groupchat 1.0 usage statistics gathering Groupchat 1.0 was probably the protocol that predated [XEP-0045: Multi-User Chat] and there is still some compatibility that lives on, in the XEP and in implementations. This module tries to detect clients still using the GC 1.0 protocol and what software they run, to determine if support can be removed. Since joins in the GC 1.0 protocol are highly ambiguous, some hits reported will be because of desynchronized MUC clients # Compatibility Should work with Prosody 0.10.x and earlier. It will not work with current trunk, since the MUC code has had major changes.
