annotate mod_tlsfail/mod_tlsfail.lua @ 5401:c8d04ac200fc

mod_http_oauth2: Reject loopback URIs as client_uri This really should be a proper website with info, https://localhost is not good enough. Ideally we'd validate that it's got proper DNS and is actually reachable, but triggering HTTP or even DNS lookups seems like it would carry abuse potential that would best to avoid.
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:20:55 +0200
parents 7009e16192fa
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
4434
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 local st = require "util.stanza";
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 local xmlns_starttls = 'urn:ietf:params:xml:ns:xmpp-tls';
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 local starttls_attr = { xmlns = xmlns_starttls };
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 local s2s_feature = st.stanza("starttls", starttls_attr);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 local starttls_failure = st.stanza("failure", starttls_attr);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7
4702
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
8 module:hook("stream-features", function(event)
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
9 local features = event.features;
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
10 features:add_child(s2s_feature);
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
11 end);
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
12
4434
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
13 module:hook("s2s-stream-features", function(event)
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
14 local features = event.features;
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
15 features:add_child(s2s_feature);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16 end);
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
17
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
18 -- Hook <starttls/>
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
19 module:hook("stanza/urn:ietf:params:xml:ns:xmpp-tls:starttls", function(event)
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
20 local origin = event.origin;
4702
7009e16192fa mod_tlsfail: Add c2s support
Kim Alvefur <zash@zash.se>
parents: 4434
diff changeset
21 (origin.sends2s or origin.send)(starttls_failure);
4434
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
22 origin:close();
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
23 return true;
f10ab82be166 mod_tlsfail: Test how servers react to starttls failure
Kim Alvefur <zash@zash.se>
parents:
diff changeset
24 end);