Mercurial > prosody-modules
view mod_password_reset/README.markdown @ 5213:dc0f502c12f1
mod_http_oauth2: Fix authorization code logic
I have no idea what it did before or if it even worked.
RFC 6749 section 4.1.2 says:
> A maximum authorization code lifetime of 10 minutes is RECOMMENDED.
So this should prevent use of codes older than 10 minutes and remove
them from the cache some time after they expire.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Mon, 06 Mar 2023 16:49:43 +0100 |
parents | 660160fe97fa |
children |
line wrap: on
line source
--- labels: - 'Stage-Alpha' summary: 'Enables users to reset their password via a link' rockspec: build: copy_directories: - password_reset ... Introduction ============ This module allows users to reset their password via a simple link to a web page. Reset links may be generated by an admin through their XMPP client using the ad-hoc command that this module provides. Alternatively other modules may reuse this module to generate links and e.g. send them via email to the user directly. A link is only valid for a single reset, and expires after a duration (24 hours by default). This module depends on Prosody's internal webserver. Compatibility ============= ----- ------- 0.10 Works ----- ------- trunk Works ----- -------