Log

description author age
mod_tokenauth: Remove expired tokens from storage Matthew Wild Thu, 06 Oct 2022 16:00:39 +0100
mod_tokenauth: Invalidate tokens issued before most recent password change Matthew Wild Thu, 06 Oct 2022 15:59:07 +0100
prosodyctl: check turn: More clearly indicate the error is from TURN server Matthew Wild Thu, 06 Oct 2022 11:12:57 +0100
mod_authz_internal: Fix warning due to global use Kim Alvefur Tue, 04 Oct 2022 12:04:43 +0200
Backed out changeset 1bc2220cd6ec Jonas Schäfer Mon, 03 Oct 2022 12:55:11 +0200
util.jwt: More robust ECDSA signature parsing, fail early on unexpected length Matthew Wild Fri, 30 Sep 2022 20:38:31 +0100
util.crypto: Fix tests Kim Alvefur Fri, 30 Sep 2022 00:27:10 +0200
util.jwt: Add support for ES512 (+ tests) Matthew Wild Thu, 29 Sep 2022 23:17:42 +0100
util.crypto, util.jwt: Generate consistent signature sizes (via padding) Matthew Wild Thu, 29 Sep 2022 23:15:39 +0100
CHANGES: Update with MUC permission changes Matthew Wild Thu, 29 Sep 2022 12:57:05 +0100
mod_authz_internal: Allow specifying default role for public (remote) users Matthew Wild Thu, 29 Sep 2022 12:46:02 +0100
Backed out changeset 73a45ba6e3f1 in favour of 427dd01f0864 Matthew Wild Thu, 29 Sep 2022 12:43:09 +0100
mod_muc: Better map restrict_room_creation to role permissions (behaviour change) Matthew Wild Thu, 29 Sep 2022 12:30:52 +0100
mod_authz_internal: Allow configuring role of local-server/parent-host users Matthew Wild Thu, 29 Sep 2022 12:10:14 +0100
muc: Re-allow non-admins to configure persistence (thanks Meaz) Matthew Wild Wed, 28 Sep 2022 17:47:00 +0100
doap: Latest XEP-0440 supported since 9f100ab9ffdf Matthew Wild Mon, 26 Sep 2022 15:47:15 +0100
mod_admin_shell: Fix display of session without role (thanks Link Mauve) Kim Alvefur Fri, 23 Sep 2022 11:58:15 +0200
mod_saslauth: Put <sasl-channel-binding> in stream:features per XEP-0440 0.4.0 Matthew Wild Wed, 21 Sep 2022 15:00:06 +0100
Merge 0.12->trunk Kim Alvefur Thu, 15 Sep 2022 11:11:52 +0200
util.stanza: Return nil instead of nothing (fix test with luassert >=1.9) 0.12 Kim Alvefur Thu, 15 Sep 2022 11:05:21 +0200
mod_storage_sql: Strip timestamp precision in queries to fix error (thanks muppeth) Kim Alvefur Wed, 07 Sep 2022 12:27:12 +0200
mod_http_file_share: Use correct variable name (thanks riau.sni) Matthew Wild Sun, 04 Sep 2022 10:01:57 +0100
mod_saslauth: Fix incorrect variable name introduced in 27a4a7e64831 Matthew Wild Sat, 03 Sep 2022 21:25:51 +0100
mod_smacks: Set session flag during successful enable Matthew Wild Sat, 03 Sep 2022 21:20:29 +0100
mod_smacks: Add type field to results so actions can be later distinguished Matthew Wild Sat, 03 Sep 2022 21:20:07 +0100
mod_saslauth: Only announce bind feature if no resource yet bound Matthew Wild Sat, 03 Sep 2022 21:19:00 +0100
semgrep: Catch stanza:text() (assuming it's meant to be :get_text()) Matthew Wild Sat, 03 Sep 2022 21:17:38 +0100
util.paseto: Do strict type check in pae() function Kim Alvefur Mon, 11 Jul 2022 18:48:57 +0200
util.crypto: Use Lua 5.2 API for predictable buffer size Kim Alvefur Mon, 11 Jul 2022 17:11:38 +0200
util.crypto: Use stack space buffers Kim Alvefur Mon, 11 Jul 2022 17:01:55 +0200
util.paseto: Drop custom wrappers around key objects Matthew Wild Mon, 11 Jul 2022 14:30:39 +0100
util.paseto: Add tests based on official PASETO test vectors Matthew Wild Mon, 11 Jul 2022 14:10:07 +0100
util.paseto: Export similar API to new util.jwt for ease and consistency Matthew Wild Mon, 11 Jul 2022 14:09:16 +0100
util.paseto: Error early on invalid keys Matthew Wild Mon, 11 Jul 2022 14:08:55 +0100
util.paseto: Fix to decode footer before comparison Matthew Wild Mon, 11 Jul 2022 13:51:39 +0100
mod_http_file_share: Switch to new util.jwt API Matthew Wild Mon, 11 Jul 2022 13:49:47 +0100
util.jwt: Add new init() convenience method to obtain both signer and verifier Matthew Wild Mon, 11 Jul 2022 13:43:01 +0100
util.jwt: Consolidate payload parsing, ensure it's always a valid object Matthew Wild Mon, 11 Jul 2022 13:42:08 +0100
util.jwt: Provide built-in token expiry support (defaults to 3600s lifetime) Matthew Wild Mon, 11 Jul 2022 13:28:29 +0100
util.jwt: All the algorithms (+ all the tests!) Matthew Wild Sat, 02 Jul 2022 15:29:04 +0100
util.crypto: tests: fix some tests that didn't do much (thanks luacheck!) Matthew Wild Sat, 02 Jul 2022 15:27:44 +0100
util.crypto: More digests for sign/verify, use macros for clarity/consistency Matthew Wild Sat, 02 Jul 2022 14:59:52 +0100
util.jwt: Overhaul of tests to use declarative approach Matthew Wild Sat, 02 Jul 2022 14:22:20 +0100
spec: Move test crypto keys to a shared file for clarity and easy maintenance Matthew Wild Sat, 02 Jul 2022 12:36:52 +0100
util.jwt: Add support for RSA-based algorithms (RS256, PS256) Matthew Wild Sat, 02 Jul 2022 12:26:43 +0100
util.crypto: Friendlier error message on incorrect key types Matthew Wild Sat, 02 Jul 2022 11:51:24 +0100
util.crypto: Add support for RSA signatures (PKCS1-v1.5 + PSS) Matthew Wild Sat, 02 Jul 2022 11:50:56 +0100
util.jwt: Add support/tests for ES256 via improved API and using util.crypto Matthew Wild Fri, 01 Jul 2022 18:51:15 +0100
util.crypto: Add Teal type specification Kim Alvefur Thu, 30 Jun 2022 15:38:22 +0200
util.paseto: Implementation of PASETO v4.public tokens Matthew Wild Fri, 24 Jun 2022 17:03:28 +0100
util.crypto: New wrapper for some operations in OpenSSL's libcrypto Matthew Wild Fri, 24 Jun 2022 16:56:16 +0100
util-src: Add new utility header managed_pointer.h Matthew Wild Fri, 01 Jul 2022 15:11:08 +0100
mod_smacks: Set session.smacks after sending <enabled/> to fix traceback Matthew Wild Mon, 29 Aug 2022 15:58:51 +0100
core.moduleapi: Check for local role-aware sessions before e.g. s2s Kim Alvefur Mon, 29 Aug 2022 11:47:31 +0200
mod_smacks: Use new :add_error() in last remaining error result construction Matthew Wild Mon, 29 Aug 2022 15:48:07 +0100
mod_smacks: Split enable handling to stages, to allow easier SASL2 integration Matthew Wild Mon, 29 Aug 2022 15:45:52 +0100