annotate mod_s2s_reload_newcomponent/mod_s2s_reload_newcomponent.lua @ 5616:59d5fc50f602

mod_http_oauth2: Implement refresh token rotation Makes refresh tokens one-time-use, handing out a new refresh token with each access token. Thus if a refresh token is stolen and used by an attacker, the next time the legitimate client tries to use the previous refresh token, it will not work and the attack will be noticed. If the attacker does not use the refresh token, it becomes invalid after the legitimate client uses it. This behavior is recommended by draft-ietf-oauth-security-topics
author Kim Alvefur <zash@zash.se>
date Sun, 23 Jul 2023 02:56:08 +0200
parents fe5bb7b13a59
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
213
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
1 local modulemanager = require "core.modulemanager";
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
2 local config = require "core.configmanager";
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
3
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
4 module.host = "*";
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
5
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
6 local function reload_components()
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
7 local defined_hosts = config.getconfig();
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
8
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
9 for host in pairs(defined_hosts) do
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
10 if (not hosts[host] and host ~= "*") then
214
7487f8b47662 mod_s2s_reload_newcomponent: fix debug logs
Gaurav <gauravsri@gmail.com>
parents: 213
diff changeset
11 module:log ("debug", "loading new component %s", host);
2781
fe5bb7b13a59 mod_s2s_reload_newcomponent: Fix to use imported configmanager instead of global
Matthew Wild <mwild1@gmail.com>
parents: 214
diff changeset
12 modulemanager.load(host, config.get(host, "core", "component_module"));
213
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
13 end
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
14 end;
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
15
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
16 return;
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
17 end
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
18
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
19 module:hook("config-reloaded", reload_components);
89051a926f74 initial creation of module for reloading new components
Gaurav <gauravsri@gmail.com>
parents:
diff changeset
20