File

plugins/mod_authz_internal.lua @ 11368:0bc3acf37428

core.certmanager: Add comments explaining the 'verifyext' TLS settings Thanks to debacle for reminding me, in the context of mod_auth_ccert I wonder if we still need lsec_ignore_purpose, Let's Encrypt seems to include both client and server purposes in certs.
author Kim Alvefur <zash@zash.se>
date Sat, 06 Feb 2021 22:12:38 +0100
parent 10659:8f95308c3c45
child 11472:c32753ceb0f0
line wrap: on
line source

local normalize = require "util.jid".prep;
local admin_jids = module:get_option_inherited_set("admins", {}) / normalize;
local host = module.host;
local role_store = module:open_store("roles");

local admin_role = { ["prosody:admin"] = true };

function get_user_roles(user)
	if admin_jids:contains(user.."@"..host) then
		return admin_role;
	end
	return role_store:get(user);
end

function get_jid_roles(jid)
	if admin_jids:contains(jid) then
		return admin_role;
	end
	return nil;
end