Mercurial > prosody-modules
view mod_audit_auth/mod_audit_auth.lua @ 5210:898575a0c6f3
mod_http_oauth2: Switch to '303 See Other' redirects
This is the recommendation by draft-ietf-oauth-v2-1-07 section 7.5.2. It is
the only redirect code that guarantees the user agent will use a GET request,
rather than re-submitting a POST request to the new URL.
The latter would be bad for us, as we are encoding auth tokens in the form
data.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Mon, 06 Mar 2023 10:37:43 +0000 |
parents | 08dea42a302a |
children | b357ff3d0c8a |
line wrap: on
line source
module:depends("audit"); -- luacheck: read globals module.audit module:hook("authentication-failure", function(event) local session = event.session; module:audit(session.sasl_handler.username, "authentication-failure", { session = session, }); end) module:hook("authentication-success", function(event) local session = event.session; module:audit(session.sasl_handler.username, "authentication-success", { session = session, }); end)