Software / code / prosody-modules
File
mod_proxy65_whitelist/README.markdown @ 5624:d8622797e315
mod_http_oauth2: Shorten default token validity periods
With refresh tokens, short lifetime for access tokens is not a problem.
The arbitrary choice of one hour seems reasonable. RFC 6749 has it as
example value.
One week for refresh tokens matching the default archive retention
period. This means that a client that remains unused for one week will
have to sign in again. An actively used client will continually push
that forward with each used refresh token.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Mon, 24 Jul 2023 01:30:14 +0200 |
| parent | 1820:8de50be756e5 |
| child | 5923:694b62d8a82f |
line wrap: on
line source
--- labels: 'Stage-Alpha' summary: Limit which file transfer users can use ... Introduction ------------ This module attempts to restrict use of non-whitelisted XEP-0065 proxies. Configuration ------------- Without any options, the module will restrict users to local [proxy65 components](https://prosody.im/doc/modules/mod_proxy65). -- additional proxies to allow allowed_streamhosts = { "proxy.eu.jabber.org" } The module will add all local proxies to that list. To prevent it from doing that, set allow_local_streamhosts = false