Mercurial > prosody-modules
annotate mod_proxy65_whitelist/README.markdown @ 5549:01a0b67a9afd
mod_http_oauth2: Add TODO about disabling password grant
Per recommendation in draft-ietf-oauth-security-topics-23 it should at
the very least be disabled by default.
However since this is used by the Snikket web portal some care needs to
be taken not to break this, unless it's already broken by other changes
to this module.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 16 Jun 2023 00:06:53 +0200 |
parents | 8de50be756e5 |
children | 694b62d8a82f |
rev | line source |
---|---|
1820
8de50be756e5
Various README files: Correct indentation levels, fix syntax and other small fixes
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
1 --- |
1803 | 2 labels: 'Stage-Alpha' |
3 summary: Limit which file transfer users can use | |
4 ... | |
5 | |
6 Introduction | |
7 ------------ | |
8 | |
9 This module attempts to restrict use of non-whitelisted XEP-0065 | |
10 proxies. | |
11 | |
12 Configuration | |
13 ------------- | |
14 | |
15 Without any options, the module will restrict users to local [proxy65 | |
16 components](https://prosody.im/doc/modules/mod_proxy65). | |
17 | |
18 -- additional proxies to allow | |
19 allowed_streamhosts = { "proxy.eu.jabber.org" } | |
20 | |
21 The module will add all local proxies to that list. To prevent it from | |
22 doing that, set | |
23 | |
24 allow_local_streamhosts = false |