Mercurial > prosody-modules
view mod_muc_webchat_url/mod_muc_webchat_url.lua @ 5682:527c747711f3
mod_http_oauth2: Limit revocation to clients own tokens in strict mode
RFC 7009 section 2.1 states:
> The authorization server first validates the client credentials (in
> case of a confidential client) and then verifies whether the token was
> issued to the client making the revocation request. If this
> validation fails, the request is refused and the client is informed of
> the error by the authorization server as described below.
The first part was already covered (in strict mode). This adds the later
part using the hash of client_id recorded in 0860497152af
It still seems weird to me that revoking a leaked token should not be
allowed whoever might have discovered it, as that seems the responsible
thing to do.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 29 Oct 2023 11:30:49 +0100 |
parents | dcafddc31b1c |
children |
line wrap: on
line source
local jid_split = require "util.jid".split; module:depends"muc"; local webchat_baseurl = module:get_option_string("muc_webchat_baseurl", nil); local function get_default_url(room) if not webchat_baseurl then -- no template return nil; end if room:get_hidden() or room:get_members_only() or room:get_password() then -- not a public room return nil; end return (webchat_baseurl:gsub("{(%w+)}", { jid = room.jid, node = select(1, jid_split(room.jid)), host = select(2, jid_split(room.jid)), })); end local function get_webchat_url(room) local webchat_url = room._data.webchat_url; if webchat_url then -- explicitly configured return webchat_url; end return get_default_url(room); end module:hook("muc-config-form", function(event) local room, form = event.room, event.form; table.insert(form, { name = "muc#roomconfig_webchat_url", type = "text-single", label = "URL where this room can be joined", datatype = "xs:anyURI", value = get_webchat_url(room), }); end); module:hook("muc-config-submitted", function(event) local room, fields, changed = event.room, event.fields, event.changed; local new = fields["muc#roomconfig_webchat_url"]; if new ~= get_webchat_url(room) then if new == get_default_url(room) then room._data.webchat_url = nil; else room._data.webchat_url = new; end if type(changed) == "table" then changed["muc#roomconfig_webchat_url"] = true; else event.changed = true; end end end); module:hook("muc-disco#info", function (event) local room, form, formdata = event.room, event.form, event.formdata; local webchat_url = get_webchat_url(room); if not webchat_url or webchat_url == "" then return; end table.insert(form, { name = "muc#roominfo_webchat_url", }); formdata["muc#roominfo_webchat_url"] = webchat_url; end);