Mercurial > prosody-modules
view mod_pubsub_hub/README.markdown @ 5404:1087f697c3f3
mod_http_oauth2: Strip unknown extra fields from client registration
We shouldn't sign things we don't understand!
RFC 7591 section-2 states:
> The authorization server MUST ignore any client metadata sent by the
> client that it does not understand (for instance, by silently removing
> unknown metadata from the client's registration record during
> processing).
Prevents grandfathering in of unvalidated data that might become used
later, especially since the 'additionalProperties' schema keyword was
removed in 698fef74ce53
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:23:40 +0200 |
parents | f933e3909795 |
children |
line wrap: on
line source
--- summary: PubSubHubbub hub ... Introduction ============ This module implements a [PubSubHubbub](http://pubsubhubbub.github.io/PubSubHubbub/pubsubhubbub-core-0.3.html) (PuSH) hub, allowing PuSH clients to subscribe to local XMPP [Publish-Subscribe](http://xmpp.org/extensions/xep-0060.html) nodes stored by [mod\_pubsub](http://prosody.im/doc/modules/mod_pubsub) and receive real time updates to feeds. Configuration ============= Component "pubsub.example.com" "pubsub" modules_enabled = { "pubsub_hub"; } The hub is then available on `http://pubsub.example.com:5280/hub`. Compatibility ============= ------- -------------- trunk Works 0.10 Should work 0.9 Works 0.8 Doesn't work ------- --------------