mod_http_oauth2: Reject URLs with 'userinfo' part (thanks mimi89999) The LuaSocket parser supports these but they're deprecated without replacement by RFC 3986 > Use of the format "user:password" in the userinfo field is deprecated Allowing it in OAuth2 URLs is probably bad from a security perspective.

---
labels:
- 'Stage-Obsolete'
---

::: {.alert .alert-warning}
As of Prosody 0.12.x, `prosodyctl shell user list HOST` can be used
instead of this module.
:::

This module adds a command to `prosodyctl` for listing users.

``` sh
prosodyctl mod_listusers
```