Mercurial > prosody-modules
annotate mod_admin_blocklist/README.markdown @ 5448:9d542e86e19a
mod_http_oauth2: Allow requesting a subset of scopes on token refresh
This enables clients to request access tokens with fewer permissions
than the grant they were given, reducing impact of token leak. Clients
could e.g. request access tokens with some privileges and immediately
revoke them after use, or other strategies.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Thu, 11 May 2023 21:40:09 +0200 |
parents | 96e83b4a93f7 |
children |
rev | line source |
---|---|
1855 | 1 --- |
2 summary: Block s2s connections based on admin blocklists | |
3 ... | |
4 | |
5 This module uses the blocklists set by admins for blocking s2s | |
6 connections. | |
7 | |
2315
212564152060
mod_admin_blocklist/README: Autolinks!
Kim Alvefur <zash@zash.se>
parents:
2314
diff
changeset
|
8 So if an admin blocks a bare domain using [Blocking Command][xep191] |
2316
2a2de19413e7
mod_admin_blocklist/README: Turns out autolink.lua doesn't know about official modules
Kim Alvefur <zash@zash.se>
parents:
2315
diff
changeset
|
9 via [mod\_blocklist][doc:modules:mod_blocklist] then no s2s connections |
2a2de19413e7
mod_admin_blocklist/README: Turns out autolink.lua doesn't know about official modules
Kim Alvefur <zash@zash.se>
parents:
2315
diff
changeset
|
10 will be allowed to or from that domain. |
5017
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
11 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
12 # Configuring |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
13 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
14 ## Prosody 0.12 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
15 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
16 Starting with Prosody 0.12, the role or roles that determine whether a |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
17 particular users blocklist is used can be configured: |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
18 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
19 ```lua |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
20 -- This is the default: |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
21 admin_blocklist_roles = { "prosody:operator", "prosody:admin" } |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
22 ``` |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
23 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
24 ## Prosody 0.11 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
25 |
96e83b4a93f7
mod_admin_blocklist: Add config option for which role(s) to consider (0.12+)
Kim Alvefur <zash@zash.se>
parents:
2316
diff
changeset
|
26 In Prosody 0.11 the [`admins`][doc:admins] setting is used. |