prosody
7ca5645f46cd
teal-src/util/hashes.d.tl
Software / code / prosody
File
teal-src/util/hashes.d.tl @ 12658:7ca5645f46cd
usermanager: Remove concept of global authz provider
Rationale:
- Removes a bunch of code!
- We don't have many cases where an actor is not bound to one of our hosts
- A notable exception is the admin shell, but if we ever attempt to lock those
sessions down, there is a load of other work that also has to be done. And
it's not clear if we would need a global authz provider for that anyway.
- Removes an extra edge case from the necessary mental model for operators
- Sessions that aren't bound to a host generally are anonymous or have an
alternative auth model (such as by IP addres).
- With the encapsulation now provided by util.roles, ad-hoc "detached roles"
can still be created anyway by code that needs them.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Fri, 12 Aug 2022 16:21:57 +0100 |
| parent | 12564:36e769c64054 |
line wrap: on
line source
local type hash = function (msg : string, hex : boolean) : string local type hmac = function (key : string, msg : string, hex : boolean) : string local type kdf = function (pass : string, salt : string, i : integer) : string local record lib sha1 : hash sha256 : hash sha224 : hash sha384 : hash sha512 : hash md5 : hash sha3_256 : hash sha3_512 : hash blake2s256 : hash blake2b512 : hash hmac_sha1 : hmac hmac_sha256 : hmac hmac_sha224 : hmac hmac_sha384 :hmac hmac_sha512 : hmac hmac_md5 : hmac hmac_sha3_256 : hmac hmac_sha3_512 : hmac scram_Hi_sha1 : kdf pbkdf2_hmac_sha1 : kdf pbkdf2_hmac_sha256 : kdf equals : function (string, string) : boolean version : string _LIBCRYPTO_VERSION : string end return lib
