Mercurial > prosody-modules
view mod_invite/README.markdown @ 5617:d8622797e315
mod_http_oauth2: Shorten default token validity periods
With refresh tokens, short lifetime for access tokens is not a problem.
The arbitrary choice of one hour seems reasonable. RFC 6749 has it as
example value.
One week for refresh tokens matching the default archive retention
period. This means that a client that remains unused for one week will
have to sign in again. An actively used client will continually push
that forward with each used refresh token.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Mon, 24 Jul 2023 01:30:14 +0200 |
| parents | 78b7879a04f7 |
| children |
line wrap: on
line source
--- labels: - 'Stage-Deprecated' summary: 'Allows users to invite new users' ... **NOTE:** This module has been deprecated. Its functionality has been moved to other modules, see the mod_invites documentation for details. Introduction ============ This module allows users with an account to generate single-use invite URLs using an ad-hoc command. The invite URLs allow new users to create an account even if public registration is disabled. After the account is created, the inviter and the invitee are automatically added to the other's roster. The inviter of a user is stored, so can be used later (for example, for detecting spammers). This module depends on Prosody's internal webserver. Compatibility ============= ----- ------- 0.9 Works ----- -------