view mod_compat_bind/mod_compat_bind.lua @ 5472:b80b6947b079

mod_http_oauth2: Always show early errors to user Before having validated the client_id, communicating an error back to the client via redirect would make this an open redirect, so we may just as well skip past that logic, and especially the warning log message.
author Kim Alvefur <zash@zash.se>
date Thu, 18 May 2023 13:43:17 +0200
parents 73fbfd1e820b
children
line wrap: on
line source

-- Compatibility with clients that set 'to' on resource bind requests
--
-- http://xmpp.org/rfcs/rfc3920.html#bind
-- http://xmpp.org/rfcs/rfc6120.html#bind-servergen-success

local st = require "util.stanza";

module:hook("iq/host/urn:ietf:params:xml:ns:xmpp-bind:bind", function(event)
	local fixed_stanza = st.clone(event.stanza);
	fixed_stanza.attr.to = nil;
	prosody.core_process_stanza(event.origin, fixed_stanza);
	return true;
end);