Mercurial > prosody-modules
view mod_compat_muc_admin/README.markdown @ 5404:1087f697c3f3
mod_http_oauth2: Strip unknown extra fields from client registration
We shouldn't sign things we don't understand!
RFC 7591 section-2 states:
> The authorization server MUST ignore any client metadata sent by the
> client that it does not understand (for instance, by silently removing
> unknown metadata from the client's registration record during
> processing).
Prevents grandfathering in of unvalidated data that might become used
later, especially since the 'additionalProperties' schema keyword was
removed in 698fef74ce53
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Tue, 02 May 2023 16:23:40 +0200 |
| parents | bdedf85a3e2e |
| children |
line wrap: on
line source
--- labels: - 'Stage-Beta' summary: | COMPAT Module for old clients using wrong namespaces in MUC's affiliation manipulations. ... Details ======= Adds compatibility for old clients/libraries attempting to change affiliations and retrieve 'em sending the \< http://jabber.org/protocol/muc\#owner \> xmlns instead of \< http://jabber.org/protocol/muc\#admin \>. Usage ===== Copy the plugin into your prosody's modules directory. And add it between the enabled muc component's modules Compatibility ============= - 0.7-0.8.x