Software / code / prosody-modules
Changeset
5773:c89077b4f46e
mod_audit_tokens: Record events fired by mod_tokenauth in audit log
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 01 Dec 2023 21:32:33 +0100 |
| parents | 5772:238c4ac8b735 |
| children | 5774:d563a6b0dfb7 |
| files | mod_audit_tokens/README.md mod_audit_tokens/mod_audit_tokens.lua |
| diffstat | 2 files changed, 27 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/mod_audit_tokens/README.md Fri Dec 01 21:32:33 2023 +0100 @@ -0,0 +1,8 @@ +--- +summary: Store token events in the audit log +rockspec: + dependencies: + - mod_audit +... + +This module stores events relating to auth tokens, e.g. grant creations and revokations, in the audit log provided by `mod_audit`.
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/mod_audit_tokens/mod_audit_tokens.lua Fri Dec 01 21:32:33 2023 +0100 @@ -0,0 +1,19 @@ +local jid = require"util.jid"; + +module:depends("audit"); +-- luacheck: read globals module.audit + +module:hook("token-grant-created", function(event) + module:audit(jid.join(event.username, event.host), "token-grant-created", { + }); +end) + +module:hook("token-grant-revoked", function(event) + module:audit(jid.join(event.username, event.host), "token-grant-revoked", { + }); +end) + +module:hook("token-revoked", function(event) + module:audit(jid.join(event.username, event.host), "token-revoked", { + }); +end)
