annotate mod_saslname/mod_saslname.lua @ 3503:882180b459a0

mod_pubsub_post: Restructure authentication and authorization (BC) This deprecates the default "superuser" actor model and makes the default equivalent to the previous "request.id". A single actor and secret per node is supported because HTTP and WebHooks don't normally include any authorization identity. Allowing authentication bypass when no secret is given should be relatively safe when the actor is unprivileged, as will be unless explicitly configured otherwise.
author Kim Alvefur <zash@zash.se>
date Sat, 30 Mar 2019 21:16:13 +0100
parents e927d95512e8
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1271
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 local hostname = module:get_option_string("sasl_hostname", module.host);
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 module:hook("stream-features", function(event)
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 local features = event.features;
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 local mechs = features:get_child("mechanisms", "urn:ietf:params:xml:ns:xmpp-sasl");
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 if mechs then
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 mechs:tag("hostname", { xmlns = "urn:xmpp:domain-based-name:1" })
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 :text(hostname):up();
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9 end
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10 end);