Log

description author age
mod_isolate_host: handle server-generated stanzas Jonas Schäfer 21 months ago
mod_authz_delegate: make resistant against startup order issues Jonas Schäfer 21 months ago
mod_client_management: New module for users to view/manage permitted clients Matthew Wild 21 months ago
mod_http_admin_api: Add roles to user schema in openapi Kim Alvefur 21 months ago
mod_http_admin_api: Fix types of numbers in openapi spec Kim Alvefur 21 months ago
Merge accidental extra head Kim Alvefur 21 months ago
mod_vcard_muc: take roles into account for access check Jonas Schäfer 21 months ago
mod_authz_delegate: introduce module to "link" authorization of hosts Jonas Schäfer 21 months ago
mod_authz_delegate: introduce module to "link" authorization of hosts Jonas Schäfer 21 months ago
mod_sasl2_fast: Add an API that allows modules to check if a client has FAST Matthew Wild 21 months ago
mod_sasl2_fast: Add flag to FAST sasl_handler for easier identification Matthew Wild 21 months ago
mod_sasl2_fast: Fix harmless off-by-one error (invalidates existing tokens!) Matthew Wild 21 months ago
mod_http_admin_api: Fix missing import Kim Alvefur 21 months ago
mod_http_admin_api: Tweak token session to please module:may() Kim Alvefur 21 months ago
mod_sasl2_fast: Invalidate tokens issued prior to last password change Matthew Wild 21 months ago
mod_rest: Add an example bash script for using mod_rest Kim Alvefur 21 months ago
mod_http_oauth2: Update to use new API of Prosody mod_tokenauth @ 601d9a375b86 Matthew Wild 21 months ago
mod_http_oauth2: Add support for refresh tokens Matthew Wild 21 months ago
mod_http_oauth2: Declare additional client registration fields as strings Kim Alvefur 21 months ago
mod_http_oauth2: Stricten check of urlencoded form data Kim Alvefur 21 months ago
mod_http_oauth2: Pedantic optimization Kim Alvefur 21 months ago
mod_pubsub_feeds: Fix packaging of support library for installer Kim Alvefur 21 months ago
mod_muc_rtbl: Handle node purge Kim Alvefur 21 months ago
mod_http_oauth2: Fix traceback on missing 'scope' parameter Kim Alvefur 21 months ago
mod_http_oauth2: Focus username field automatically Kim Alvefur 21 months ago
mod_http_oauth2: Allow user to decide which requested scopes to grant Kim Alvefur 21 months ago
mod_http_oauth2: Use <fieldset> in templates because it looks nice Kim Alvefur 21 months ago
mod_rest: Update prosody_oauth.py example to non-legacy OAuth2 Kim Alvefur 21 months ago
mod_http_oauth2: Remove another reference to obsolete function Kim Alvefur 21 months ago
mod_http_oauth2: Relax payload content type checking in revocation Kim Alvefur 21 months ago
mod_http_oauth2: Remove now unused code Kim Alvefur 21 months ago
mod_http_oauth2: Allow revoking a token without OAuth client credentials Kim Alvefur 21 months ago
mod_http_oauth2: Correctly verify OAuth client credentials on revocation Kim Alvefur 21 months ago
mod_http_oauth2: Group metadata section into OAuth and OpenID Kim Alvefur 21 months ago
mod_http_oauth2: Rename oauth client credential related functions Kim Alvefur 21 months ago
mod_sasl2: Pull user-agent info into sasl_handler for later reference Matthew Wild 21 months ago
mod_adhoc_oauth2_client: Update to call into mod_http_oauth2 Kim Alvefur 21 months ago
mod_http_oauth2: Refactor to allow reuse of OAuth client creation Kim Alvefur 21 months ago
mod_http_oauth2: Fix userinfo status code off-by-one Kim Alvefur 21 months ago
mod_http_oauth2: Implement and return ID Token in authorization code flow Kim Alvefur 21 months ago
mod_http_oauth2: Reject non-local hosts in more code paths Kim Alvefur 21 months ago
mod_http_oauth2: Add support for the "openid" scope Kim Alvefur 21 months ago
mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes Kim Alvefur 21 months ago
mod_adhoc_oauth2_client: Make note in README about current broken state Kim Alvefur 21 months ago
mod_http_oauth2: Fix attempt to index a boolean value Kim Alvefur 21 months ago
mod_audit: Allow disabling IP logging, or limiting it to a prefix Matthew Wild 21 months ago
mod_audit: Include client id in audit log entries (if known) Matthew Wild 21 months ago
mod_sasl2: Fire authentication-{success,failure} events like mod_saslauth Matthew Wild 21 months ago
mod_http_oauth2: Record details of OAuth client a token is issued to Kim Alvefur 21 months ago
mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect Kim Alvefur 21 months ago
mod_http_oauth2: Validate all URIs against client_uri in client registration Kim Alvefur 21 months ago
mod_http_oauth2: Organize HTTP routes with comments Kim Alvefur 21 months ago
mod_http_oauth2: Fix validation of informative URIs Kim Alvefur 21 months ago
mod_http_oauth2: Use more compact IDs Kim Alvefur 21 months ago
mod_http_oauth2: Validate that informative URLs match the redirect URIs Kim Alvefur 21 months ago
mod_http_oauth2: Reject insecure redirect URIs Kim Alvefur 21 months ago
mod_http_oauth2: Validate that redirect URIs are absolute Kim Alvefur 21 months ago
mod_http_oauth2: Validate basic URI syntax of redirect URIs Kim Alvefur 21 months ago
mod_spam_report_forwarder: Forward spam/abuse reports to one or more JIDs Matthew Wild 21 months ago
mod_http_oauth2: Require URL to client informational page in registration Kim Alvefur 21 months ago
mod_http_oauth2: Reorder client metadata validation schema Kim Alvefur 21 months ago
mod_firewall: Add 'REPORT TO' to report (XEP-0377) a stanza to a specified JID Matthew Wild 21 months ago
mod_firewall: README: Clarify docs about some of the stanza processing actions Matthew Wild 21 months ago
mod_firewall: Warn about invalid pubsubitemid list specification Matthew Wild 21 months ago
mod_firewall: Fix parsing of pubsubitemid list specification Matthew Wild 21 months ago
mod_http_oauth2: Fix to disable disabled response handlers correctly Kim Alvefur 21 months ago
mod_http_oauth2: Log flows enabled and disabled Kim Alvefur 21 months ago
mod_http_oauth2: Fix appending of query parts in error redirects Kim Alvefur 21 months ago
mod_http_oauth2: Implement the OpenID userinfo endpoint Kim Alvefur 21 months ago
mod_http_oauth2: Close site header tags Kim Alvefur 21 months ago
mod_http_oauth2: Fix contrast of links on consent page Kim Alvefur 22 months ago
mod_http_oauth2: token endpoint: handle missing credentials Matthew Wild 22 months ago
mod_http_oauth2: Fail early when no authorization header present Matthew Wild 22 months ago
mod_http_oauth2: Support HTTP Basic auth on token endpoint Matthew Wild 22 months ago
mod_http_oauth2: Separate extracting credentials from requests and verifying Matthew Wild 22 months ago
mod_http_oauth2: Reflect ALL attributes of the client registration Matthew Wild 22 months ago
mod_rest: Point URLs to mod_http_oauth2 in demo mode Kim Alvefur 22 months ago
mod_http_oauth2: Improve handling of redirect_uri matching and fallback Matthew Wild 22 months ago
mod_http_oauth2: Correct field name for HTTP response status code Kim Alvefur 22 months ago
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck) Matthew Wild 22 months ago
mod_cloud_notify: Add note about Lua version requirements to README Matthew Wild 22 months ago
mod_cloud_notify: Log warning when used on Lua 5.1 Matthew Wild 22 months ago
mod_http_oauth2: Remove authorization codes after use Kim Alvefur 22 months ago
mod_http_oauth2: Fix authorization code logic Kim Alvefur 22 months ago
mod_http_oauth2: Include html templates in package for plugin installer Kim Alvefur 22 months ago
mod_conversejs: This one weird trick updates options on reload Kim Alvefur 22 months ago
mod_http_oauth2: Switch to '303 See Other' redirects Matthew Wild 22 months ago
mod_http_oauth2: Allow non-HTTPS on localhost URLs Matthew Wild 22 months ago
mod_http_oauth2: Add authentication, consent and error pages Matthew Wild 22 months ago
mod_http_oauth: Factor out issuer URL calculation to a helper function Matthew Wild 22 months ago
mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ) Kim Alvefur 22 months ago
mod_http_oauth2: Specify host for which to retrieve list of roles Kim Alvefur 22 months ago
mod_http_oauth2: Return list of active roles in discovery Kim Alvefur 22 months ago
mod_http_oauth2: Return actually enabled response types in discovery Kim Alvefur 22 months ago
mod_http_oauth2: Calculate client secret expiry in registration response Kim Alvefur 22 months ago
mod_http_oauth2: Strip trailing '/' from issuer URL Matthew Wild 22 months ago
mod_http_oauth2: Advertise endpoints that are enabled Kim Alvefur 22 months ago
mod_http_oauth2: Separate client_secret verification key from JWT key Kim Alvefur 22 months ago
mod_http_oauth2: Fix response type config Kim Alvefur 22 months ago
mod_http_oauth2/README: Document config options Kim Alvefur 22 months ago
mod_http_oauth2: Remove error message Kim Alvefur 22 months ago
mod_http_oauth2: Mention name of client when giving out OOB authorization code Kim Alvefur 22 months ago
mod_http_oauth2: Comment on mutation by other module Kim Alvefur 22 months ago
mod_http_oauth2: Implement stateless dynamic client registration Kim Alvefur 22 months ago
mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207) Matthew Wild 22 months ago
mod_http_oauth2: Derive scope from correct user details Kim Alvefur 22 months ago
mod_http_oauth2: Fix to actually return OOB response Kim Alvefur 22 months ago
mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash) Matthew Wild 22 months ago
mod_http_oauth2: Implement OOB special redirect URI in code flow Kim Alvefur 22 months ago
mod_http_oauth2: Add settings for allowed grant and response types Kim Alvefur 22 months ago
mod_http_oauth2: Implement the Implicit flow Kim Alvefur 22 months ago
mod_http_oauth2: Fix treatment of 'redirect_uri' parameter in code flow Kim Alvefur 22 months ago
mod_s2s_whitelist/README: Show inclusion in modules_enabled in example Kim Alvefur 22 months ago
mod_s2s_blacklist/README: Show inclusion in modules_enabled in example Kim Alvefur 22 months ago
mod_http_oauth2: Issue tokens for the purpose of 'oauth2' Kim Alvefur 22 months ago
mod_http_oauth2: Fix removal of consumed authorization codes Kim Alvefur 22 months ago
mod_sasl2_bind2: Support for SASL handlers forcing a specific resource Matthew Wild 22 months ago
mod_rest: Remove confusing oauth2 tokens from examples Kim Alvefur 22 months ago
mod_register_apps: Detect 0.12+ when called from prosodyctl Kim Alvefur 22 months ago
mod_muc_rtbl: fix more incorrect more references to "event" Jonas Schäfer 22 months ago