prosody-modules
d6a695abb33c
mod_sasl2_fast/README.md
Software / code / prosody-modules
File
mod_sasl2_fast/README.md @ 5979:d6a695abb33c
mod_ping_muc: Delay ping a configurable amount of time
If a server is restarting, checking immediately before it has a chance
to complete its restart and get ready would often fail, preventing the
possibility of transparent restarts as supported by Prosody's mod_muc.
Reconnecting immediately when a connection is closed for being idle, or
because the remote server is trying to reclaim some resources, is also
counter-productive as the connection may fail.
Also, if there is some Internet routing problem affecting s2s, it may
help to wait a bit before checking, in case the problem resolved itself
in the mean time.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sun, 11 Aug 2024 16:10:24 +0200 |
| parent | 5901:70fa3f8de249 |
| child | 6107:bc7acb8e627e |
line wrap: on
line source
--- labels: - Stage-Beta summary: "Fast Authentication Streamlining Tokens" rockspec: dependencies: - mod_sasl2 --- This module implements a mechanism described in [XEP-0484: Fast Authentication Streamlining Tokens] via which clients can exchange a password for a secure token, improving security and streamlining future reconnections. This module depends on [mod_sasl2]. ## Configuration | Name | Description | Default | |---------------------------|--------------------------------------------------------|-----------------------| | sasl2_fast_token_ttl | Default token expiry (seconds) | `86400*21` (21 days) | | sasl2_fast_token_min_ttl | Time before tokens are eligible for rotation (seconds) | `86400` (1 day) | The `sasl2_fast_token_ttl` option determines the length of time a client can remain disconnected before being "logged out" and needing to authenticate with a password. Clients must perform at least one FAST authentication within this period to remain active. The `sasl2_fast_token_min_ttl` option defines how long before a token will be rotated by the server. By default a token is rotated if it is older than 24 hours. This value should be less than `sasl2_fast_token_ttl` to prevent clients being logged out unexpectedly.
