File

mod_invites_register_api: Use set_password() for password resets Previously the code relied on the (weird) behaviour of create_user(), which would update the password for a user account if it already existed. This has several issues, and we plan to deprecate this behaviour of create_user(). The larger issue is that this route does not trigger the user-password-changed event, which can be a security problem. For example, it did not disconnect existing user sessions (this occurs in mod_c2s in response to the event). Switching to set_password() is the right thing to do

Over the years, some servers stop working for various reasons, and leave
behind broken roster subscriptions that trigger failing s2s connections.
This module allows cleaning up such cases by unsubscribing local users
from their contacts on those servers. Also works for typos and the like.
Use with care.

```lua
Component "gmail.com" "unsubscriber"
modules_disabled = { "s2s" }
```