Mercurial > prosody-modules
view misc/lnav/prosody.json @ 5404:1087f697c3f3
mod_http_oauth2: Strip unknown extra fields from client registration
We shouldn't sign things we don't understand!
RFC 7591 section-2 states:
> The authorization server MUST ignore any client metadata sent by the
> client that it does not understand (for instance, by silently removing
> unknown metadata from the client's registration record during
> processing).
Prevents grandfathering in of unvalidated data that might become used
later, especially since the 'additionalProperties' schema keyword was
removed in 698fef74ce53
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:23:40 +0200 |
parents | f64d13d9b76b |
children | 3e6d1e248dc1 |
line wrap: on
line source
{ "$schema" : "https://lnav.org/schemas/format-v1.schema.json", "prosody_log" : { "body-field" : "message", "description" : "The Prosody IM server log format", "level" : { "debug" : "^debug$", "error" : "^error$", "info" : "^info$", "warning" : "^warn$" }, "level-field" : "loglevel", "multiline" : false, "ordered-by-time" : true, "regex" : { "standard" : { "pattern" : "^(?<timestamp>\\w{3} \\d{2} \\d{2}:\\d{2}:\\d{2})\\s+(?<loggername>\\S+)\\s+(?<loglevel>debug|info|warn|error)\\s+(?<message>.+)$" } }, "sample" : [ { "line" : "Jan 31 11:07:34 c2s565063fff480\tinfo\tClient connected" } ], "timestamp-field" : "timestamp", "timestamp-format" : "%b %d %H:%M:%S ", "title" : "Prosody log", "url" : "https://prosody.im/doc/logging", "value" : { "loggername" : { "identifier" : true, "kind" : "string" }, "payload" : { "kind" : "xml" } } } }