Mercurial > prosody-modules
view README @ 5404:1087f697c3f3
mod_http_oauth2: Strip unknown extra fields from client registration
We shouldn't sign things we don't understand!
RFC 7591 section-2 states:
> The authorization server MUST ignore any client metadata sent by the
> client that it does not understand (for instance, by silently removing
> unknown metadata from the client's registration record during
> processing).
Prevents grandfathering in of unvalidated data that might become used
later, especially since the 'additionalProperties' schema keyword was
removed in 698fef74ce53
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Tue, 02 May 2023 16:23:40 +0200 |
| parents | 4fed2379f5be |
| children |
line wrap: on
line source
prosody-modules =============== *Add-on modules for Prosody IM Server* -------------------------------------------------------------------------- Community repository for non-core, unofficial and/or experimental plugins for [Prosody][]. If you are a developer and would like to host your Prosody module in this repository, or want to contribute to existing modules, simply introduce yourself and request commit access on our [mailing list][]. Notes for users ---------------- There are lots of fun and exciting modules to be found here, we know you'll like it. However please note that each module is in a different state of development. Some are proof-of-concept, others are quite stable and ready for production use. Be sure to read the wiki page of any module before installing it on your server. We are working on methods to easily download and install modules from this repository. In the meantime most modules are either a single file and easy to install, or contain installation instructions on their wiki page. You can browse the files stored in this repository at <https://hg.prosody.im/prosody-modules>. [Prosody]: https://prosody.im/ [mailing list]: https://prosody.im/discuss