Mercurial > prosody-modules
view mod_require_otr/mod_require_otr.lua @ 5223:8b2a36847912
mod_http_oauth2: Support HTTP Basic auth on token endpoint
This is described in RFC 6749 section 2.3.1 and draft-ietf-oauth-v2-1-07 2.3.1
as the recommended way to transmit the client's credentials.
The older spec even calls it the "client password", but the new spec clarifies
that this is just another term for the client secret.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Tue, 07 Mar 2023 15:27:50 +0000 |
parents | dfe1818962f5 |
children |
line wrap: on
line source
local st = require "util.stanza"; local block_groupchat = module:get_option_boolean("otr_block_groupchat", false); function reject_plaintext_messages(event) local body = event.stanza:get_child_text("body"); if body and body:sub(1,4) ~= "?OTR" or (not block_groupchat and event.stanza.attr.type == "groupchat") then return event.origin.send(st.error_reply(event.stanza, "modify", "policy-violation", "OTR encryption is required for conversations on this server")); end end module:hook("pre-message/bare", reject_plaintext_messages, 300); module:hook("pre-message/full", reject_plaintext_messages, 300); module:hook("pre-message/host", reject_plaintext_messages, 300);