mod_authz_delegate: make resistant against startup order issues
|
Jonas Schäfer |
Fri, 31 Mar 2023 16:56:42 +0200 |
mod_client_management: New module for users to view/manage permitted clients
|
Matthew Wild |
Thu, 30 Mar 2023 11:32:50 +0100 |
mod_http_admin_api: Add roles to user schema in openapi
|
Kim Alvefur |
Thu, 30 Mar 2023 12:06:18 +0200 |
mod_http_admin_api: Fix types of numbers in openapi spec
|
Kim Alvefur |
Thu, 30 Mar 2023 12:05:05 +0200 |
Merge accidental extra head
|
Kim Alvefur |
Wed, 29 Mar 2023 17:55:29 +0200 |
mod_vcard_muc: take roles into account for access check
|
Jonas Schäfer |
Wed, 29 Mar 2023 17:52:21 +0200 |
mod_authz_delegate: introduce module to "link" authorization of hosts
|
Jonas Schäfer |
Wed, 29 Mar 2023 17:21:45 +0200 |
mod_authz_delegate: introduce module to "link" authorization of hosts
|
Jonas Schäfer |
Wed, 29 Mar 2023 17:21:45 +0200 |
mod_sasl2_fast: Add an API that allows modules to check if a client has FAST
|
Matthew Wild |
Wed, 29 Mar 2023 16:13:42 +0100 |
mod_sasl2_fast: Add flag to FAST sasl_handler for easier identification
|
Matthew Wild |
Wed, 29 Mar 2023 16:13:00 +0100 |
mod_sasl2_fast: Fix harmless off-by-one error (invalidates existing tokens!)
|
Matthew Wild |
Wed, 29 Mar 2023 16:12:15 +0100 |
mod_http_admin_api: Fix missing import
|
Kim Alvefur |
Tue, 28 Mar 2023 21:04:23 +0200 |
mod_http_admin_api: Tweak token session to please module:may()
|
Kim Alvefur |
Tue, 28 Mar 2023 20:45:11 +0200 |
mod_sasl2_fast: Invalidate tokens issued prior to last password change
|
Matthew Wild |
Tue, 28 Mar 2023 12:43:05 +0100 |
mod_rest: Add an example bash script for using mod_rest
|
Kim Alvefur |
Mon, 27 Mar 2023 23:19:09 +0200 |
mod_http_oauth2: Update to use new API of Prosody mod_tokenauth @ 601d9a375b86
|
Matthew Wild |
Mon, 27 Mar 2023 18:51:12 +0100 |
mod_http_oauth2: Add support for refresh tokens
|
Matthew Wild |
Fri, 24 Mar 2023 14:29:07 +0000 |
mod_http_oauth2: Declare additional client registration fields as strings
|
Kim Alvefur |
Sun, 26 Mar 2023 14:44:30 +0200 |
mod_http_oauth2: Stricten check of urlencoded form data
|
Kim Alvefur |
Sun, 26 Mar 2023 14:39:34 +0200 |
mod_http_oauth2: Pedantic optimization
|
Kim Alvefur |
Sun, 26 Mar 2023 14:37:42 +0200 |
mod_pubsub_feeds: Fix packaging of support library for installer
|
Kim Alvefur |
Sat, 25 Mar 2023 20:18:05 +0100 |
mod_muc_rtbl: Handle node purge
|
Kim Alvefur |
Fri, 17 Mar 2023 22:29:55 +0100 |
mod_http_oauth2: Fix traceback on missing 'scope' parameter
|
Kim Alvefur |
Fri, 24 Mar 2023 00:07:58 +0100 |
mod_http_oauth2: Focus username field automatically
|
Kim Alvefur |
Thu, 23 Mar 2023 16:48:18 +0100 |
mod_http_oauth2: Allow user to decide which requested scopes to grant
|
Kim Alvefur |
Thu, 23 Mar 2023 16:28:08 +0100 |
mod_http_oauth2: Use <fieldset> in templates because it looks nice
|
Kim Alvefur |
Thu, 23 Mar 2023 16:19:09 +0100 |
mod_rest: Update prosody_oauth.py example to non-legacy OAuth2
|
Kim Alvefur |
Thu, 23 Mar 2023 12:47:51 +0100 |
mod_http_oauth2: Remove another reference to obsolete function
|
Kim Alvefur |
Wed, 22 Mar 2023 00:09:58 +0100 |
mod_http_oauth2: Relax payload content type checking in revocation
|
Kim Alvefur |
Tue, 21 Mar 2023 22:29:47 +0100 |
mod_http_oauth2: Remove now unused code
|
Kim Alvefur |
Tue, 21 Mar 2023 22:23:28 +0100 |
mod_http_oauth2: Allow revoking a token without OAuth client credentials
|
Kim Alvefur |
Tue, 21 Mar 2023 22:02:38 +0100 |
mod_http_oauth2: Correctly verify OAuth client credentials on revocation
|
Kim Alvefur |
Tue, 21 Mar 2023 21:57:18 +0100 |
mod_http_oauth2: Group metadata section into OAuth and OpenID
|
Kim Alvefur |
Tue, 21 Mar 2023 21:45:02 +0100 |
mod_http_oauth2: Rename oauth client credential related functions
|
Kim Alvefur |
Tue, 21 Mar 2023 21:36:54 +0100 |
mod_sasl2: Pull user-agent info into sasl_handler for later reference
|
Matthew Wild |
Tue, 21 Mar 2023 15:26:03 +0000 |
mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
|
Kim Alvefur |
Sun, 19 Mar 2023 22:21:41 +0100 |
mod_http_oauth2: Refactor to allow reuse of OAuth client creation
|
Kim Alvefur |
Sun, 19 Mar 2023 22:13:27 +0100 |
mod_http_oauth2: Fix userinfo status code off-by-one
|
Kim Alvefur |
Thu, 16 Mar 2023 19:59:32 +0100 |
mod_http_oauth2: Implement and return ID Token in authorization code flow
|
Kim Alvefur |
Thu, 16 Mar 2023 19:28:44 +0100 |
mod_http_oauth2: Reject non-local hosts in more code paths
|
Kim Alvefur |
Thu, 16 Mar 2023 17:52:10 +0100 |
mod_http_oauth2: Add support for the "openid" scope
|
Kim Alvefur |
Thu, 16 Mar 2023 17:06:35 +0100 |
mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes
|
Kim Alvefur |
Thu, 16 Mar 2023 17:03:48 +0100 |
mod_adhoc_oauth2_client: Make note in README about current broken state
|
Kim Alvefur |
Thu, 16 Mar 2023 14:27:46 +0100 |
mod_http_oauth2: Fix attempt to index a boolean value
|
Kim Alvefur |
Thu, 16 Mar 2023 00:06:43 +0100 |
mod_audit: Allow disabling IP logging, or limiting it to a prefix
|
Matthew Wild |
Tue, 14 Mar 2023 18:59:39 +0000 |
mod_audit: Include client id in audit log entries (if known)
|
Matthew Wild |
Tue, 14 Mar 2023 17:48:44 +0000 |
mod_sasl2: Fire authentication-{success,failure} events like mod_saslauth
|
Matthew Wild |
Tue, 14 Mar 2023 17:13:46 +0000 |
mod_http_oauth2: Record details of OAuth client a token is issued to
|
Kim Alvefur |
Tue, 14 Mar 2023 18:08:25 +0100 |
mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect
|
Kim Alvefur |
Sun, 12 Mar 2023 17:56:23 +0100 |
mod_http_oauth2: Validate all URIs against client_uri in client registration
|
Kim Alvefur |
Sun, 12 Mar 2023 12:06:44 +0100 |
mod_http_oauth2: Organize HTTP routes with comments
|
Kim Alvefur |
Sun, 12 Mar 2023 11:27:29 +0100 |
mod_http_oauth2: Fix validation of informative URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:58:47 +0100 |
mod_http_oauth2: Use more compact IDs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:46:27 +0100 |
mod_http_oauth2: Validate that informative URLs match the redirect URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:31:02 +0100 |
mod_http_oauth2: Reject insecure redirect URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:25:50 +0100 |
mod_http_oauth2: Validate that redirect URIs are absolute
|
Kim Alvefur |
Sat, 11 Mar 2023 22:25:22 +0100 |
mod_http_oauth2: Validate basic URI syntax of redirect URIs
|
Kim Alvefur |
Sat, 11 Mar 2023 22:30:58 +0100 |
mod_spam_report_forwarder: Forward spam/abuse reports to one or more JIDs
|
Matthew Wild |
Sat, 11 Mar 2023 20:20:37 +0000 |
mod_http_oauth2: Require URL to client informational page in registration
|
Kim Alvefur |
Sat, 11 Mar 2023 21:13:00 +0100 |
mod_http_oauth2: Reorder client metadata validation schema
|
Kim Alvefur |
Sat, 11 Mar 2023 21:11:50 +0100 |