File

mod_measure_client_identities/mod_measure_client_identities.lua @ 5447:aa4828f040c5

mod_http_oauth2: Enforce client scope restrictions in authorization When registering a client, a scope field can be included as a promise to only ever use those. Here we enforce that promise, if given, ensuring a client can't request or be granted a scope it didn't provide in its registration. While currently there is no restrictions at registration time, this could be changed in the future in various ways.
author Kim Alvefur <zash@zash.se>
date Thu, 11 May 2023 19:33:44 +0200
parent 3136:fdbf7c2aed7b
line wrap: on
line source

module:set_global();

local measure = require"core.statsmanager".measure;

local counters = {
	unknown = measure("amount", "client_identities.unknown"),
};

module:hook("stats-update", function ()
	local buckets = {
		unknown = 0,
	};
	for _, session in pairs(prosody.full_sessions) do
		if session.caps_cache ~= nil then
			local node_string = session.caps_cache.attr.node;
			local node = node_string:match("([^#]+)");
			if buckets[node] == nil then
				buckets[node] = 0;
			end
			buckets[node] = buckets[node] + 1;
		else
			buckets.unknown = buckets.unknown + 1;
		end
	end
	local visited = {};
	for bucket, count in pairs(buckets) do
		if counters[bucket] == nil then
			counters[bucket] = measure("amount", "client_identities."..bucket);
		end
		counters[bucket](count);
		visited[bucket] = true;
	end
	for bucket, counter in pairs(counters) do
		if not visited[bucket] then
			counter(0);
		end
	end
end)