Mercurial > prosody-modules
annotate mod_support_room/mod_support_room.lua @ 5616:59d5fc50f602
mod_http_oauth2: Implement refresh token rotation
Makes refresh tokens one-time-use, handing out a new refresh token with
each access token. Thus if a refresh token is stolen and used by an
attacker, the next time the legitimate client tries to use the previous
refresh token, it will not work and the attack will be noticed. If the
attacker does not use the refresh token, it becomes invalid after the
legitimate client uses it.
This behavior is recommended by draft-ietf-oauth-security-topics
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 23 Jul 2023 02:56:08 +0200 |
parents | f72aa8840042 |
children |
rev | line source |
---|---|
3426
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
1 local mm = require "core.modulemanager"; |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
2 local st = require "util.stanza"; |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
3 local jid_host, jid_prep = import("util.jid", "host", "prep"); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
4 |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
5 local invite_to_room = assert(jid_prep(module:get_option_string(module.name)), |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
6 "The option " .. module.name .. " must be set"); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
7 local inviter = module:get_option_string(module.name .. "_inviter", module.host); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
8 local invite_reason = module:get_option_string(module.name .. "_reason"); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
9 |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
10 module:hook("user-registered", function (event) |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
11 local user_jid = event.username .. "@" .. event.host; |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
12 local muc = mm.get_module(jid_host(invite_to_room), "muc"); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
13 if not muc then |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
14 module:log("error", "There is no MUC service '%s'", jid_host(invite_to_room)); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
15 return; |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
16 end |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
17 local room = muc.get_room_from_jid(invite_to_room); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
18 if room then |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
19 room:set_affiliation(true, user_jid, "member", invite_reason, { reserved_nickname = event.username }); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
20 -- Invite them to the room too |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
21 module:send(st.message({ from = inviter, to = user_jid }) |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
22 :tag("x", { xmlns = "jabber:x:conference", jid = invite_to_room, reason = invite_reason }):up()); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
23 else |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
24 module:log("error", "The room %s does not exist, can't invite newly registered user", invite_to_room); |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
25 end |
f72aa8840042
mod_support_room: Module that invites newly registered users to a room
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
26 end); |