Mercurial > prosody-modules
view mod_s2s_blacklist/mod_s2s_blacklist.lua @ 5405:c7a5caad28ef
mod_http_oauth2: Enforce response type encoded in client_id
The client promises to only use this response type, so we should hold
them to that.
This makes it fail earlier if the response type is disabled or the
client is trying to use one that it promised not to use. Better than
failing after login and consent.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:31:25 +0200 |
parents | d958558e0058 |
children |
line wrap: on
line source
local st = require "util.stanza"; local blacklist = module:get_option_inherited_set("s2s_blacklist", {}); module:hook("route/remote", function (event) if blacklist:contains(event.to_host) then if event.stanza.attr.type ~= "error" then module:send(st.error_reply(event.stanza, "cancel", "not-allowed", "Communication with this domain is restricted")); end return true; end end, 100); module:hook("s2s-stream-features", function (event) if blacklist:contains(event.origin.from_host) then event.origin:close({ condition = "policy-violation"; text = "Communication with this domain is restricted"; }); end end, 1000);