Mercurial > prosody-modules
view mod_atom/README.markdown @ 5447:aa4828f040c5
mod_http_oauth2: Enforce client scope restrictions in authorization
When registering a client, a scope field can be included as a promise to
only ever use those. Here we enforce that promise, if given, ensuring a
client can't request or be granted a scope it didn't provide in its
registration. While currently there is no restrictions at registration
time, this could be changed in the future in various ways.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Thu, 11 May 2023 19:33:44 +0200 |
| parents | f478e325529e |
| children |
line wrap: on
line source
# Introduction This module exposes users [microblogging][xep277] on Prosodys built-in HTTP server. # Usage With default HTTP settings, the microblog of `user@example.com` would be seen at `https://example.com:5281/atom/user`. # Configuration The module itself has no options. However it uses the access control mechanisms in PubSub, so users must reconfigure their microblogging node to allow access, by setting `access_model` to `open`. E.g. Gajim has UI for this, look for "Personal Events" → "Configure services".