view mod_audit_auth/mod_audit_auth.lua @ 5278:d94dba396f9f

mod_http_oauth2: Declare additional client registration fields as strings Previously any property not listed in the schema was allowed in any form, which is probably a bit too liberal. Instead, limit extra fields to simple strings, which should still allow localized versions of the various URIs and descriptive properties per RFC 7591 ยง2.2
author Kim Alvefur <zash@zash.se>
date Sun, 26 Mar 2023 14:44:30 +0200
parents 08dea42a302a
children b357ff3d0c8a
line wrap: on
line source

module:depends("audit");
-- luacheck: read globals module.audit

module:hook("authentication-failure", function(event)
	local session = event.session;
	module:audit(session.sasl_handler.username, "authentication-failure", {
		session = session,
	});
end)

module:hook("authentication-success", function(event)
	local session = event.session;
	module:audit(session.sasl_handler.username, "authentication-success", {
		session = session,
	});
end)