Mercurial > prosody-modules
view mod_csi_muc_priorities/README.markdown @ 5682:527c747711f3
mod_http_oauth2: Limit revocation to clients own tokens in strict mode
RFC 7009 section 2.1 states:
> The authorization server first validates the client credentials (in
> case of a confidential client) and then verifies whether the token was
> issued to the client making the revocation request. If this
> validation fails, the request is refused and the client is informed of
> the error by the authorization server as described below.
The first part was already covered (in strict mode). This adds the later
part using the hash of client_id recorded in 0860497152af
It still seems weird to me that revoking a leaked token should not be
allowed whoever might have discovered it, as that seems the responsible
thing to do.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sun, 29 Oct 2023 11:30:49 +0100 |
| parents | 562d3b219876 |
| children |
line wrap: on
line source
# Introduction This module lets users specify which of the group chats they are in are less important. This influences when [mod_csi_simple][doc:modules:mod_csi_simple] decides to send stanzas vs waiting until there is more to send. Users in many large public channels might benefit from this. # Configuration The module is configured via ad-hoc an command called *Configure group chat priorities* that should appear in the menus of compatible clients. The command presents a form that accepts a list of XMPP addresses. Currently there is a single priority, *Lower priority*, which is suitable for e.g. noisy public channels. mod_csi_simple considers groupchat messages important by default on the assumptions that smaller and more important private chats are more common among most users. A message of type groupchat from an address in this list will not be considered important enough to send it to an inactive client, unless it is from the current user or mentions of their nickname. **Note** that mention support require the separate module [mod_track_muc_joins] to also be loaded. ``` {.lua} modules_enabled = { -- other modules etc "csi_simple", "csi_muc_priorities", "track_muc_joins", -- optional } ```