Mercurial > prosody-modules
annotate mod_saslname/mod_saslname.lua @ 5448:9d542e86e19a
mod_http_oauth2: Allow requesting a subset of scopes on token refresh
This enables clients to request access tokens with fewer permissions
than the grant they were given, reducing impact of token leak. Clients
could e.g. request access tokens with some privileges and immediately
revoke them after use, or other strategies.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Thu, 11 May 2023 21:40:09 +0200 |
parents | e927d95512e8 |
children |
rev | line source |
---|---|
1271
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
1 local hostname = module:get_option_string("sasl_hostname", module.host); |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
2 |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
3 module:hook("stream-features", function(event) |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
4 local features = event.features; |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
5 local mechs = features:get_child("mechanisms", "urn:ietf:params:xml:ns:xmpp-sasl"); |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
6 if mechs then |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
7 mechs:tag("hostname", { xmlns = "urn:xmpp:domain-based-name:1" }) |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
8 :text(hostname):up(); |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
9 end |
e927d95512e8
mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
10 end); |