Mercurial > prosody-modules
view mod_secure_interfaces/mod_secure_interfaces.lua @ 5221:22483cfce3ce
mod_http_oauth2: Reflect ALL attributes of the client registration
Per RFC 7591:
"
Additionally, the authorization server MUST return all registered
metadata about this client, including any fields provisioned by the
authorization server itself.
"
The idea is that the server may replace/drop fields in the registration, so
what gets reflected back to the client is the source of truth about the
registration.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Tue, 07 Mar 2023 14:52:43 +0000 |
parents | 6c806a99f802 |
children |
line wrap: on
line source
local secure_interfaces = module:get_option_set("secure_interfaces", { "127.0.0.1", "::1" }); module:hook("stream-features", function (event) local session = event.origin; if session.type ~= "c2s_unauthed" then return; end local socket = session.conn:socket(); if not socket.getsockname then module:log("debug", "Unable to determine local address of incoming connection"); return; end local localip = socket:getsockname(); if secure_interfaces:contains(localip) then module:log("debug", "Marking session from %s to %s as secure", session.ip or "[?]", localip); session.secure = true; session.conn.starttls = false; else module:log("debug", "Not marking session from %s to %s as secure", session.ip or "[?]", localip); end end, 2500);