view mod_s2s_reload_newcomponent/mod_s2s_reload_newcomponent.lua @ 5404:1087f697c3f3

mod_http_oauth2: Strip unknown extra fields from client registration We shouldn't sign things we don't understand! RFC 7591 section-2 states: > The authorization server MUST ignore any client metadata sent by the > client that it does not understand (for instance, by silently removing > unknown metadata from the client's registration record during > processing). Prevents grandfathering in of unvalidated data that might become used later, especially since the 'additionalProperties' schema keyword was removed in 698fef74ce53
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:23:40 +0200
parents fe5bb7b13a59
children
line wrap: on
line source

local modulemanager = require "core.modulemanager";
local config = require "core.configmanager";

module.host = "*";

local function reload_components()
        local defined_hosts = config.getconfig();

        for host in pairs(defined_hosts) do
                if (not hosts[host] and host ~= "*") then
                        module:log ("debug", "loading new component %s", host);
                        modulemanager.load(host, config.get(host, "core", "component_module"));
                end
        end;

        return;
end

module:hook("config-reloaded", reload_components);