Mercurial > prosody-modules
view mod_http_status/README.md @ 5796:93d6e9026c1b
mod_http_oauth2: Do not enforce PKCE on Device and OOB flows
PKCE does not appear to be used with the Device flow. I have found no
mention of any interaction between those standards. Since no data is
delivered via redirects in these cases, PKCE may not serve any purpose.
This is mostly a problem because we reuse the authorization code to
implement the Device and OOB flows.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 15 Dec 2023 12:10:07 +0100 |
parents | e274431bf4ce |
children |
line wrap: on
line source
Prosody 0.12 added an API allowing modules to report their status. This module allows reading these statuses via HTTP for use in monitoring. ``` $ curl http://prosody.localhost:5280/status { "example.com" : { "c2s" : { "message" : "Loaded", "type" : "core" } } } ``` # Configuration By default only access via localhost is allowed. This can be adjusted with `http_status_allow_ips`. The following example shows the default: ``` http_status_allow_ips = { "::1"; "127.0.0.1" } ``` Access can also be granted to one IP range via CIDR notation: ``` http_status_allow_cidr = "172.17.2.0/24" ``` The default for `http_status_allow_cidr` is empty.