view mod_csi_grace_period/mod_csi_grace_period.lua @ 5447:aa4828f040c5

mod_http_oauth2: Enforce client scope restrictions in authorization When registering a client, a scope field can be included as a promise to only ever use those. Here we enforce that promise, if given, ensuring a client can't request or be granted a scope it didn't provide in its registration. While currently there is no restrictions at registration time, this could be changed in the future in various ways.
author Kim Alvefur <zash@zash.se>
date Thu, 11 May 2023 19:33:44 +0200
parents e1e337dc05b6
children
line wrap: on
line source

-- Copyright (c) 2019 Kim Alvefur
--
-- This project is MIT/X11 licensed. Please see the
-- COPYING file in the source package for more information.
--
-- Yes, this module touches stores data in user sessions
-- luacheck: ignore 122

local grace_period = module:get_option_number("grace_period", 30);

local user_sessions = prosody.hosts[module.host].sessions;

module:hook("csi-is-stanza-important", function (event)
	if event.stanza.name ~= "message" then return end
	local session = event.session;
	if not session then return; end

	local user_session = user_sessions[session.username];
	if not user_session then return; end

	if user_session.grace_time_start then
		if user_session.last_active == session.resource then
			return;
		end
		if (os.time() - user_session.grace_time_start) < grace_period then
			session.log("debug", "Within grace period, probably seen");
			event.reason = "grace period";
			return false;
		end
	end
end, 1);

local function on_activity(event)
	local stanza, origin = event.stanza, event.origin;
	local user_session = user_sessions[origin.username];
	if not user_session then return; end

	if stanza:get_child("body") or stanza:get_child("active", "http://jabber.org/protocol/chatstates") then
		user_session.last_active = origin.resource;
		user_session.grace_time_start = os.time();
	end
end
module:hook("pre-message/full", on_activity);
module:hook("pre-message/bare", on_activity);
module:hook("pre-message/host", on_activity);