view mod_nooffline_noerror/mod_nooffline_noerror.lua @ 5617:d8622797e315

mod_http_oauth2: Shorten default token validity periods With refresh tokens, short lifetime for access tokens is not a problem. The arbitrary choice of one hour seems reasonable. RFC 6749 has it as example value. One week for refresh tokens matching the default archive retention period. This means that a client that remains unused for one week will have to sign in again. An actively used client will continually push that forward with each used refresh token.
author Kim Alvefur <zash@zash.se>
date Mon, 24 Jul 2023 01:30:14 +0200
parents e0f3e29ab18a
children
line wrap: on
line source

-- Ignore disabled offline storage
--
-- Copyright (C) 2019-2020 Thilo Molitor
--
-- This project is MIT/X11 licensed. Please see the
-- COPYING file in the source package for more information.
--

-- depend on mod_mam to make sure mam is at least loaded and active
module:depends "mam";

-- ignore offline messages and don't return any error (the message will be already in MAM at this point)
-- this is *only* triggered if mod_offline is *not* loaded and completely ignored otherwise
module:hook("message/offline/handle", function(event)
	local log = event.origin and event.origin.log or module._log;
	if log then
		log("info", "Ignoring offline message (mod_offline seems *not* to be loaded)...");
	end
	return true;
end, -100);