prosody-modules
94399ad6b5ab
mod_storage_s3/README.md
Software / code / prosody-modules
File
mod_storage_s3/README.md @ 6191:94399ad6b5ab
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:13:39 +0000 |
| parent | 6140:476717ab3cd9 |
line wrap: on
line source
--- labels: - 'Stage-Alpha' summary: Cloud Native Storage ... ::: {.alert .alert-danger} This storage driver is fully async and requires that all storage access happens in an async-compatible context. As of 2023-10-14 this work in Prosody is not yet complete. For now, this module is primarily suited for testing and finding areas where async work is incomplete. ::: ::: {.alert .alert-danger} The data layout in S3 is not final and may change at any point in incompatible ways. ::: This module provides storage in Amazon S3 compatible things. It has been tested primarily with MinIO. ``` lua s3_bucket = "prosody" s3_base_uri = "http://localhost:9000" s3_region = "us-east-1" s3_access_key = "YOUR-ACCESS-KEY-HERE" s3_secret_key = "YOUR-SECRET-KEY-HERE" ```
