|
mod_http_oauth2: Refactor to allow reuse of OAuth client creation
|
Kim Alvefur |
Sun, 19 Mar 2023 22:13:27 +0100 |
|
mod_http_oauth2: Fix userinfo status code off-by-one
|
Kim Alvefur |
Thu, 16 Mar 2023 19:59:32 +0100 |
|
mod_http_oauth2: Implement and return ID Token in authorization code flow
|
Kim Alvefur |
Thu, 16 Mar 2023 19:28:44 +0100 |
|
mod_http_oauth2: Reject non-local hosts in more code paths
|
Kim Alvefur |
Thu, 16 Mar 2023 17:52:10 +0100 |
|
mod_http_oauth2: Add support for the "openid" scope
|
Kim Alvefur |
Thu, 16 Mar 2023 17:06:35 +0100 |
|
mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes
|
Kim Alvefur |
Thu, 16 Mar 2023 17:03:48 +0100 |
|
mod_adhoc_oauth2_client: Make note in README about current broken state
|
Kim Alvefur |
Thu, 16 Mar 2023 14:27:46 +0100 |
|
mod_http_oauth2: Fix attempt to index a boolean value
|
Kim Alvefur |
Thu, 16 Mar 2023 00:06:43 +0100 |
|
mod_audit: Allow disabling IP logging, or limiting it to a prefix
|
Matthew Wild |
Tue, 14 Mar 2023 18:59:39 +0000 |
|
mod_audit: Include client id in audit log entries (if known)
|
Matthew Wild |
Tue, 14 Mar 2023 17:48:44 +0000 |
|
mod_sasl2: Fire authentication-{success,failure} events like mod_saslauth
|
Matthew Wild |
Tue, 14 Mar 2023 17:13:46 +0000 |
|
mod_http_oauth2: Record details of OAuth client a token is issued to
|
Kim Alvefur |
Tue, 14 Mar 2023 18:08:25 +0100 |
|
mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect
|
Kim Alvefur |
Sun, 12 Mar 2023 17:56:23 +0100 |
|
mod_http_oauth2: Validate all URIs against client_uri in client registration
|
Kim Alvefur |
Sun, 12 Mar 2023 12:06:44 +0100 |
|
mod_http_oauth2: Organize HTTP routes with comments
|
Kim Alvefur |
Sun, 12 Mar 2023 11:27:29 +0100 |
|
mod_http_oauth2: Fix validation of informative URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:58:47 +0100 |
|
mod_http_oauth2: Use more compact IDs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:46:27 +0100 |
|
mod_http_oauth2: Validate that informative URLs match the redirect URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:31:02 +0100 |
|
mod_http_oauth2: Reject insecure redirect URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:25:50 +0100 |
|
mod_http_oauth2: Validate that redirect URIs are absolute
|
Kim Alvefur |
Sat, 11 Mar 2023 22:25:22 +0100 |
|
mod_http_oauth2: Validate basic URI syntax of redirect URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:30:58 +0100 |
|
mod_spam_report_forwarder: Forward spam/abuse reports to one or more JIDs
|
Matthew Wild |
Sat, 11 Mar 2023 20:20:37 +0000 |
|
mod_http_oauth2: Require URL to client informational page in registration
|
Kim Alvefur |
Sat, 11 Mar 2023 21:13:00 +0100 |
|
mod_http_oauth2: Reorder client metadata validation schema
|
Kim Alvefur |
Sat, 11 Mar 2023 21:11:50 +0100 |
|
mod_firewall: Add 'REPORT TO' to report (XEP-0377) a stanza to a specified JID
|
Matthew Wild |
Sat, 11 Mar 2023 18:41:49 +0000 |
|
mod_firewall: README: Clarify docs about some of the stanza processing actions
|
Matthew Wild |
Sat, 11 Mar 2023 18:29:38 +0000 |
|
mod_firewall: Warn about invalid pubsubitemid list specification
|
Matthew Wild |
Sat, 11 Mar 2023 16:40:24 +0000 |
|
mod_firewall: Fix parsing of pubsubitemid list specification
|
Matthew Wild |
Sat, 11 Mar 2023 16:40:09 +0000 |
|
mod_http_oauth2: Fix to disable disabled response handlers correctly
|
Kim Alvefur |
Fri, 10 Mar 2023 12:03:23 +0100 |
|
mod_http_oauth2: Log flows enabled and disabled
|
Kim Alvefur |
Fri, 10 Mar 2023 12:01:52 +0100 |
|
mod_http_oauth2: Fix appending of query parts in error redirects
|
Kim Alvefur |
Fri, 10 Mar 2023 11:54:30 +0100 |
|
mod_http_oauth2: Implement the OpenID userinfo endpoint
|
Kim Alvefur |
Thu, 09 Mar 2023 14:46:06 +0100 |
|
mod_http_oauth2: Close site header tags
|
Kim Alvefur |
Thu, 09 Mar 2023 13:15:13 +0100 |
|
mod_http_oauth2: Fix contrast of links on consent page
|
Kim Alvefur |
Tue, 07 Mar 2023 23:55:33 +0100 |
|
mod_http_oauth2: token endpoint: handle missing credentials
|
Matthew Wild |
Tue, 07 Mar 2023 15:33:07 +0000 |
|
mod_http_oauth2: Fail early when no authorization header present
|
Matthew Wild |
Tue, 07 Mar 2023 15:31:19 +0000 |
|
mod_http_oauth2: Support HTTP Basic auth on token endpoint
|
Matthew Wild |
Tue, 07 Mar 2023 15:27:50 +0000 |
|
mod_http_oauth2: Separate extracting credentials from requests and verifying
|
Matthew Wild |
Tue, 07 Mar 2023 15:18:41 +0000 |
|
mod_http_oauth2: Reflect ALL attributes of the client registration
|
Matthew Wild |
Tue, 07 Mar 2023 14:52:43 +0000 |
|
mod_rest: Point URLs to mod_http_oauth2 in demo mode
|
Kim Alvefur |
Tue, 07 Mar 2023 14:59:45 +0100 |
|
mod_http_oauth2: Improve handling of redirect_uri matching and fallback
|
Matthew Wild |
Tue, 07 Mar 2023 13:19:19 +0000 |
|
mod_http_oauth2: Correct field name for HTTP response status code
|
Kim Alvefur |
Tue, 07 Mar 2023 13:14:25 +0100 |
|
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
|
Matthew Wild |
Tue, 07 Mar 2023 10:27:40 +0000 |
|
mod_cloud_notify: Add note about Lua version requirements to README
|
Matthew Wild |
Tue, 07 Mar 2023 10:26:57 +0000 |
|
mod_cloud_notify: Log warning when used on Lua 5.1
|
Matthew Wild |
Tue, 07 Mar 2023 10:24:58 +0000 |
|
mod_http_oauth2: Remove authorization codes after use
|
Kim Alvefur |
Mon, 06 Mar 2023 16:53:27 +0100 |
|
mod_http_oauth2: Fix authorization code logic
|
Kim Alvefur |
Mon, 06 Mar 2023 16:49:43 +0100 |
|
mod_http_oauth2: Include html templates in package for plugin installer
|
Kim Alvefur |
Mon, 06 Mar 2023 15:55:11 +0100 |
|
mod_conversejs: This one weird trick updates options on reload
|
Kim Alvefur |
Thu, 23 Feb 2023 00:30:59 +0100 |
|
mod_http_oauth2: Switch to '303 See Other' redirects
|
Matthew Wild |
Mon, 06 Mar 2023 10:37:43 +0000 |
|
mod_http_oauth2: Allow non-HTTPS on localhost URLs
|
Matthew Wild |
Mon, 06 Mar 2023 10:29:14 +0000 |
|
mod_http_oauth2: Add authentication, consent and error pages
|
Matthew Wild |
Mon, 06 Mar 2023 09:46:58 +0000 |
|
mod_http_oauth: Factor out issuer URL calculation to a helper function
|
Matthew Wild |
Mon, 06 Mar 2023 09:40:17 +0000 |
|
mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ)
|
Kim Alvefur |
Sun, 05 Mar 2023 12:38:20 +0100 |
|
mod_http_oauth2: Specify host for which to retrieve list of roles
|
Kim Alvefur |
Sat, 04 Mar 2023 23:36:13 +0100 |
|
mod_http_oauth2: Return list of active roles in discovery
|
Kim Alvefur |
Sat, 04 Mar 2023 21:36:00 +0100 |
|
mod_http_oauth2: Return actually enabled response types in discovery
|
Kim Alvefur |
Sat, 04 Mar 2023 21:24:35 +0100 |
|
mod_http_oauth2: Calculate client secret expiry in registration response
|
Kim Alvefur |
Sat, 04 Mar 2023 17:06:47 +0100 |
|
mod_http_oauth2: Strip trailing '/' from issuer URL
|
Matthew Wild |
Sat, 04 Mar 2023 13:23:26 +0000 |
|
mod_http_oauth2: Advertise endpoints that are enabled
|
Kim Alvefur |
Fri, 03 Mar 2023 22:54:46 +0100 |
|
mod_http_oauth2: Separate client_secret verification key from JWT key
|
Kim Alvefur |
Fri, 03 Mar 2023 22:48:59 +0100 |
|
mod_http_oauth2: Fix response type config
|
Kim Alvefur |
Fri, 03 Mar 2023 22:48:38 +0100 |
|
mod_http_oauth2/README: Document config options
|
Kim Alvefur |
Fri, 03 Mar 2023 22:48:14 +0100 |
|
mod_http_oauth2: Remove error message
|
Kim Alvefur |
Fri, 03 Mar 2023 22:03:50 +0100 |
|
mod_http_oauth2: Mention name of client when giving out OOB authorization code
|
Kim Alvefur |
Fri, 03 Mar 2023 21:45:24 +0100 |
|
mod_http_oauth2: Comment on mutation by other module
|
Kim Alvefur |
Fri, 03 Mar 2023 21:45:05 +0100 |
|
mod_http_oauth2: Implement stateless dynamic client registration
|
Kim Alvefur |
Fri, 03 Mar 2023 21:14:19 +0100 |
|
mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207)
|
Matthew Wild |
Fri, 03 Mar 2023 19:21:38 +0000 |
|
mod_http_oauth2: Derive scope from correct user details
|
Kim Alvefur |
Fri, 03 Mar 2023 18:00:28 +0100 |
|
mod_http_oauth2: Fix to actually return OOB response
|
Kim Alvefur |
Fri, 03 Mar 2023 14:22:05 +0100 |
|
mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash)
|
Matthew Wild |
Fri, 03 Mar 2023 11:24:05 +0000 |
|
mod_http_oauth2: Implement OOB special redirect URI in code flow
|
Kim Alvefur |
Thu, 02 Mar 2023 23:59:09 +0100 |
|
mod_http_oauth2: Add settings for allowed grant and response types
|
Kim Alvefur |
Thu, 02 Mar 2023 23:57:29 +0100 |
|
mod_http_oauth2: Implement the Implicit flow
|
Kim Alvefur |
Thu, 02 Mar 2023 22:06:50 +0100 |
|
mod_http_oauth2: Fix treatment of 'redirect_uri' parameter in code flow
|
Kim Alvefur |
Thu, 02 Mar 2023 22:00:42 +0100 |
|
mod_s2s_whitelist/README: Show inclusion in modules_enabled in example
|
Kim Alvefur |
Thu, 02 Mar 2023 11:38:57 +0100 |
|
mod_s2s_blacklist/README: Show inclusion in modules_enabled in example
|
Kim Alvefur |
Thu, 02 Mar 2023 11:38:08 +0100 |
|
mod_http_oauth2: Issue tokens for the purpose of 'oauth2'
|
Kim Alvefur |
Wed, 01 Mar 2023 21:55:34 +0100 |
|
mod_http_oauth2: Fix removal of consumed authorization codes
|
Kim Alvefur |
Wed, 01 Mar 2023 21:11:48 +0100 |
|
mod_sasl2_bind2: Support for SASL handlers forcing a specific resource
|
Matthew Wild |
Wed, 01 Mar 2023 13:21:29 +0000 |
|
mod_rest: Remove confusing oauth2 tokens from examples
|
Kim Alvefur |
Tue, 28 Feb 2023 18:15:20 +0100 |
|
mod_register_apps: Detect 0.12+ when called from prosodyctl
|
Kim Alvefur |
Thu, 23 Feb 2023 21:07:13 +0100 |
|
mod_muc_rtbl: fix more incorrect more references to "event"
|
Jonas Schäfer |
Wed, 22 Feb 2023 13:39:01 +0100 |
|
mod_muc_rtbl: ignore blocklist for affiliated users for messages
|
Jonas Schäfer |
Wed, 22 Feb 2023 13:35:03 +0100 |
|
mod_muc_rtbl: fix traceback because of scoping error
|
Jonas Schäfer |
Wed, 22 Feb 2023 13:33:16 +0100 |
|
mod_muc_rtbl: move use of "private" attributes to single function
|
Jonas Schäfer |
Tue, 21 Feb 2023 21:41:19 +0100 |
|
mod_muc_rtbl: also filter messages
|
Jonas Schäfer |
Tue, 21 Feb 2023 21:37:27 +0100 |
|
New module, mod_muc_reserve_nick_pattern
|
Stephen Paul Weber |
Mon, 20 Feb 2023 13:42:13 -0500 |
|
Strip images from XHTML-IM as well
|
Stephen Paul Weber |
Mon, 20 Feb 2023 13:41:46 -0500 |
|
mod_muc_moderation: Derive role from reserved nickname if occupant
|
Kim Alvefur |
Sun, 19 Feb 2023 18:17:37 +0100 |
|
mod_muc_moderation: Refactor to prepare for new version of XEP-0425
|
Kim Alvefur |
Sun, 19 Feb 2023 17:51:45 +0100 |
|
mod_unsubscriber: Revoke roster subscriptions of unreachable hosts
|
Kim Alvefur |
Sun, 19 Feb 2023 17:39:04 +0100 |
|
mod_jsxc: Correct description of resources setting (thanks ham5urg)
|
Kim Alvefur |
Thu, 16 Feb 2023 18:53:51 +0100 |
|
mod_jsxc: Words about jQuery
|
Kim Alvefur |
Thu, 16 Feb 2023 17:17:05 +0100 |
|
mod_jsxc: Add plugin installer metadata
|
Kim Alvefur |
Thu, 16 Feb 2023 17:06:23 +0100 |
|
mod_jsxc: Document config options
|
Kim Alvefur |
Thu, 16 Feb 2023 17:06:07 +0100 |
|
mod_bob: Fix traceback when iq has no payload (thanks meaz)
|
Matthew Wild |
Fri, 10 Feb 2023 12:13:47 +0000 |
|
mod_muc_auto_member: New module to automatically make MUC participants members
|
Matthew Wild |
Mon, 30 Jan 2023 15:07:31 +0000 |
|
mod_http_status: Report module statuses
|
Kim Alvefur |
Mon, 30 Jan 2023 00:48:12 +0100 |
|
mod_firewall: Fix 'is_admin' internal dependency rule #1797 (thanks diane)
|
Kim Alvefur |
Fri, 27 Jan 2023 23:06:25 +0100 |
|
mod_rest/README: Words about bearer tokens
|
Kim Alvefur |
Wed, 25 Jan 2023 20:39:13 +0100 |
|
mod_inject_ecaps2: Mention and link to XEP-0390 in text
|
Kim Alvefur |
Mon, 16 Jan 2023 15:54:40 +0100 |
|
mod_unified_push: Update docs to recommend loading on normal hosts
|
Matthew Wild |
Sat, 14 Jan 2023 18:31:38 +0000 |
|
mod_unified_push: README: Update docs
|
Matthew Wild |
Sat, 14 Jan 2023 17:59:40 +0000 |
|
mod_unified_push: Make unified_push_secret only required for jwt backend
|
Matthew Wild |
Sat, 14 Jan 2023 17:59:29 +0000 |
|
mod_unified_push: Improved error handling and reporting
|
Matthew Wild |
Sat, 14 Jan 2023 16:16:47 +0000 |
|
mod_unified_push: fix return values for paseto backend
|
Matthew Wild |
Sat, 14 Jan 2023 16:16:00 +0000 |
|
mod_unified_push: Fix storage backend error behaviours and return values
|
Matthew Wild |
Sat, 14 Jan 2023 16:15:35 +0000 |
|
mod_unified_push: Fix default ACL in component mode
|
Matthew Wild |
Sat, 14 Jan 2023 16:14:50 +0000 |
|
mod_unified_push: Fixes for paseto backend initialization
|
Matthew Wild |
Sat, 14 Jan 2023 15:32:24 +0000 |
|
mod_unified_push: Add support for multiple token backends, including stoage
|
Matthew Wild |
Sat, 14 Jan 2023 14:31:37 +0000 |
|
mod_unified_push: Refactor in anticipation of other registration backends
|
Matthew Wild |
Fri, 13 Jan 2023 16:50:43 +0000 |
|
mod_unified_push: Add ACL option to restrict access
|
Matthew Wild |
Fri, 13 Jan 2023 16:41:48 +0000 |
|
mod_unified_push: Fix JWT method parameter order (fixes #1791)
|
Matthew Wild |
Fri, 13 Jan 2023 16:40:00 +0000 |
|
mod_http_dir_listing: Update Compatibility section
|
Kim Alvefur |
Fri, 13 Jan 2023 16:28:08 +0100 |
|
mod_http_dir_listing: Add metadata to fix plugin package build
|
Kim Alvefur |
Fri, 13 Jan 2023 16:27:02 +0100 |
|
mod_invites_api: Fix traceback when no query params (thanks Menel)
|
Matthew Wild |
Wed, 11 Jan 2023 10:09:12 +0000 |
|
mod_invites_api: Fix traceback on list command with no entries (thanks mirux)
|
Matthew Wild |
Wed, 11 Jan 2023 09:59:55 +0000 |
|
Remove reverse dependencies on mod_invites (for plugin installer)
|
Kim Alvefur |
Tue, 10 Jan 2023 20:49:17 +0100 |
|
mod_pubsub_summary: Mention HTML to Message Styling conversion
|
Kim Alvefur |
Tue, 10 Jan 2023 19:40:22 +0100 |
