Software /
code /
prosody-modules
File
mod_alias/mod_alias_postfixadmin.sh @ 5390:f2363e6d9a64
mod_http_oauth2: Advertise the currently supported id_token signing algorithm
This field is REQUIRED. The algorithm RS256 MUST be included, but isn't
because we don't implement it, as that would require implementing a pile
of additional cryptography and JWT stuff. Instead the id_token is
signed using the client secret, which allows verification by the client,
since it's a shared secret per OpenID Connect Core 1.0 § 10.1 under
Symmetric Signatures.
OpenID Connect Discovery 1.0 has a lot of REQUIRED and MUST clauses that
are not supported here, but that's okay because this is served from the
RFC 8414 OAuth 2.0 Authorization Server Metadata .well-known endpoint!
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 30 Apr 2023 16:13:40 +0200 |
parent | 1953:0c3ba5ff7a3b |
line wrap: on
line source
#!/bin/sh # Copyright (C) 2015 Travis Burtrum # This file is MIT/X11 licensed. # run like ./mod_alias_postfixadmin.sh "mysql -N -upostfixadmin -ppostfixadmin postfixadmin" > /etc/prosody/aliases.cfg.lua # then put: # Include "aliases.cfg.lua" # in prosody.cfg.lua mysql="$1" echo "-- alias plugin, generated by mod_alias_postfixadmin.sh" echo "aliases = {" echo "SELECT concat('["'"'"', address, '"'"'"] = "'"'"', goto, '"'"'";') FROM alias WHERE address != goto; SELECT concat('["'"'"', address, '"'"'"] = "'"'"', goto, '"'"'";') FROM ( select replace(address, concat('@', target_domain), concat('@', alias_domain)) as address, goto FROM alias JOIN alias_domain ON alias_domain.target_domain = SUBSTRING(alias.address, locate('@',alias.address) + 1, length(alias.address)) ) a WHERE a.address != a.goto;" | $mysql | sort | uniq echo "}"