File

mod_invites_register_api: Use set_password() for password resets Previously the code relied on the (weird) behaviour of create_user(), which would update the password for a user account if it already existed. This has several issues, and we plan to deprecate this behaviour of create_user(). The larger issue is that this route does not trigger the user-password-changed event, which can be a security problem. For example, it did not disconnect existing user sessions (this occurs in mod_c2s in response to the event). Switching to set_password() is the right thing to do.

---
description: Generate test data
labels:
- 'Stage-Alpha'
---

This module is of use to developers who want to fill their Prosody storage with
test data, e.g. for debugging, testing or performance measurements of Prosody or
client code.

Currently it only supports filling MAM archives, but patches are welcome for other
functionality.