Mercurial > prosody-modules
view mod_bookmarks2/tests/conversion.scs @ 5682:527c747711f3
mod_http_oauth2: Limit revocation to clients own tokens in strict mode
RFC 7009 section 2.1 states:
> The authorization server first validates the client credentials (in
> case of a confidential client) and then verifies whether the token was
> issued to the client making the revocation request. If this
> validation fails, the request is refused and the client is informed of
> the error by the authorization server as described below.
The first part was already covered (in strict mode). This adds the later
part using the hash of client_id recorded in 0860497152af
It still seems weird to me that revoking a leaked token should not be
allowed whoever might have discovered it, as that seems the responsible
thing to do.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 29 Oct 2023 11:30:49 +0100 |
parents | d835cb7d2b47 |
children |
line wrap: on
line source
# Pubsub: Bookmarks 2.0 [Client] Juliet-old jid: admin@localhost password: password [Client] Juliet-new jid: admin@localhost password: password // admin@localhost is assumed to have node creation privileges --------- Juliet-new connects -- Generated with https://gitlab.com/xmpp-rs/xmpp-parsers: -- cargo run --example=generate-caps https://code.matthewwild.co.uk/scansion/ <<< "<query xmlns='http://jabber.org/protocol/disco#info'><identity category='client' name='scansion' type='bot'/><feature var='http://jabber.org/protocol/disco#info'/><feature var='urn:xmpp:bookmarks:1+notify'/></query>" Juliet-new sends: <presence id='presence0'> <c xmlns='http://jabber.org/protocol/caps' hash='sha-1' node='https://code.matthewwild.co.uk/scansion/' ver='CPuQARM1gCTq2f6/ZjHUzWL2QHg='/> <c xmlns='urn:xmpp:caps'> <hash xmlns='urn:xmpp:hashes:2' algo='sha-256'>OTy9GPCvBZRvqzOHmD/ThA1WbBH3tNoeKbdqKQCRPHc=</hash> <hash xmlns='urn:xmpp:hashes:2' algo='sha3-256'>f/rxDeTf6HyjQ382V3GEG/UfAs5IeclC05jBSBnVQCI=</hash> <hash xmlns='urn:xmpp:hashes:2' algo='blake2b-256'>ucfqg/NrLj0omE+26hYMrbpcmxHcU4Z3hfAQIF+6tt0=</hash> </c> </presence> Juliet-new receives: <iq from="${Juliet-new's JID}" id='disco' type='get'> <query xmlns='http://jabber.org/protocol/disco#info' node='https://code.matthewwild.co.uk/scansion/#CPuQARM1gCTq2f6/ZjHUzWL2QHg='/> </iq> Juliet-new sends: <iq to="${Juliet-new's JID}" id='disco' type='result'> <query xmlns='http://jabber.org/protocol/disco#info' node='https://code.matthewwild.co.uk/scansion/#CPuQARM1gCTq2f6/ZjHUzWL2QHg='> <identity category='client' name='scansion' type='bot'/> <feature var='http://jabber.org/protocol/disco#info'/> <feature var='urn:xmpp:bookmarks:1+notify'/> </query> </iq> Juliet-old connects Juliet-old sends: <iq type='get' id='get0'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old receives: <iq type='result' id='get0'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old sends: <iq type='set' id='pub0'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'> <conference name='The Play's the Thing' autojoin='true' jid='theplay@conference.shakespeare.lit'> <nick>JC</nick> </conference> </storage> </query> </iq> Juliet-new receives: <message type='headline' from="${Juliet-new's JID}"> <event xmlns='http://jabber.org/protocol/pubsub#event'> <items node='urn:xmpp:bookmarks:1'> <item id='theplay@conference.shakespeare.lit'> <conference xmlns='urn:xmpp:bookmarks:1' name='The Play's the Thing' autojoin='true'> <nick>JC</nick> </conference> </item> </items> </event> </message> Juliet-old receives: <iq type='result' id='pub0'/> Juliet-old sends: <iq type='get' id='get1'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old receives: <iq type='result' id='get1'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'> <conference name='The Play's the Thing' autojoin='true' jid='theplay@conference.shakespeare.lit'> <nick>JC</nick> </conference> </storage> </query> </iq> Juliet-old sends: <iq type='set' id='pub1'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'> <conference name='The Play's the Thing' autojoin='true' jid='theplay@conference.shakespeare.lit'> <nick>JC</nick> </conference> <conference name='The Orchard' autojoin='true' jid='orchard@conference.shakespeare.lit'> <nick>JC</nick> </conference> </storage> </query> </iq> Juliet-new receives: <message type='headline' from="${Juliet-new's JID}"> <event xmlns='http://jabber.org/protocol/pubsub#event'> <items node='urn:xmpp:bookmarks:1'> <item id='orchard@conference.shakespeare.lit'> <conference xmlns='urn:xmpp:bookmarks:1' name='The Orchard' autojoin='true'> <nick>JC</nick> </conference> </item> </items> </event> </message> Juliet-old receives: <iq type='result' id='pub1'/> Juliet-old sends: <iq type='get' id='get2'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old receives: <iq type='result' id='get2'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'> <conference name='The Play's the Thing' autojoin='true' jid='theplay@conference.shakespeare.lit'> <nick>JC</nick> </conference> <conference name='The Orchard' autojoin='true' jid='orchard@conference.shakespeare.lit'> <nick>JC</nick> </conference> </storage> </query> </iq> Juliet-old sends: <iq type='set' id='retract0'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'> <conference name='The Orchard' autojoin='true' jid='orchard@conference.shakespeare.lit'> <nick>JC</nick> </conference> </storage> </query> </iq> Juliet-new receives: <message type='headline' from="${Juliet-new's JID}"> <event xmlns='http://jabber.org/protocol/pubsub#event'> <items node='urn:xmpp:bookmarks:1'> <retract id='theplay@conference.shakespeare.lit'/> </items> </event> </message> Juliet-old receives: <iq type='result' id='retract0'/> Juliet-old sends: <iq type='get' id='get3'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old receives: <iq type='result' id='get3'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'> <conference name='The Orchard' autojoin='true' jid='orchard@conference.shakespeare.lit'> <nick>JC</nick> </conference> </storage> </query> </iq> Juliet-old sends: <iq type='set' id='purge0'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-new receives: <message type='headline' from="${Juliet-new's JID}"> <event xmlns='http://jabber.org/protocol/pubsub#event'> <purge node='urn:xmpp:bookmarks:1'/> </event> </message> Juliet-old receives: <iq type='result' id='purge0'/> Juliet-old sends: <iq type='get' id='get4'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old receives: <iq type='result' id='get4'> <query xmlns='jabber:iq:private'> <storage xmlns='storage:bookmarks'/> </query> </iq> Juliet-old disconnects Juliet-new disconnects // vim: syntax=xml: