Mercurial > prosody-modules
view mod_http_hostaliases/mod_http_hostaliases.lua @ 5796:93d6e9026c1b
mod_http_oauth2: Do not enforce PKCE on Device and OOB flows
PKCE does not appear to be used with the Device flow. I have found no
mention of any interaction between those standards. Since no data is
delivered via redirects in these cases, PKCE may not serve any purpose.
This is mostly a problem because we reuse the authorization code to
implement the Device and OOB flows.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 15 Dec 2023 12:10:07 +0100 |
parents | 29e3a09275c5 |
children |
line wrap: on
line source
module:set_global(); local host_map = { }; module:wrap_object_event(require "net.http.server"._events, false, function (handlers, event_name, event_data) local verb, host, path = event_name:match("^(%w+ )(.-)(/.*)"); host = host_map[host]; event_name = verb .. host .. path; return handlers(event_name, event_data); end); function module.add_host(module) local http_host = module:get_option_string("http_host"); for host in module:get_option_set("http_host_aliases", {}) do host_map[host] = http_host; end end