Software /
code /
prosody-modules
File
mod_muc_moderation/README.md @ 6191:94399ad6b5ab
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Thu, 06 Feb 2025 10:13:39 +0000 |
parent | 6156:bcad6baa4fc3 |
line wrap: on
line source
--- labels: - Stage-Beta summary: Let moderators remove spam and abuse messages --- # Introduction This module implements [XEP-0425: Message Moderation]. # Usage Moderation is done via a supporting client and requires a `moderator` role in the channel / group chat. # Configuration Example [MUC component][doc:chatrooms] configuration: ``` {.lua} Component "channels.example.com" "muc" modules_enabled = { "muc_mam", "muc_moderation", } ``` # Compatibility ------- --------------- trunk Works^[as of 2024-10-22] 0.12 Works ------- --------------- ## XEP version This module implements [XEP-0425] v0.2.1 (tombstones included) and v0.3.0 (except for tombstones). ## Clients - [Converse.js](https://conversejs.org/) - [Gajim](https://dev.gajim.org/gajim/gajim/-/issues/10107) - [clix](https://code.zash.se/clix/rev/6c1953fbe0fa) - [Cheogram](https://cheogram.com/) ### Feature requests - [Conversations](https://codeberg.org/iNPUTmice/Conversations/issues/20) - [Dino](https://github.com/dino/dino/issues/1133) - [Profanity](https://github.com/profanity-im/profanity/issues/1336)