Mercurial > prosody-modules
view mod_s2s_blacklist/mod_s2s_blacklist.lua @ 5186:fa3059e653fa
mod_http_oauth2: Implement the Implicit flow
Everyone says this is insecure and bad, but it's also the only thing
that makes sense for e.g. pure JavaScript clients, but hey implement
this even more complicated thing instead!
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Thu, 02 Mar 2023 22:06:50 +0100 |
parents | d958558e0058 |
children |
line wrap: on
line source
local st = require "util.stanza"; local blacklist = module:get_option_inherited_set("s2s_blacklist", {}); module:hook("route/remote", function (event) if blacklist:contains(event.to_host) then if event.stanza.attr.type ~= "error" then module:send(st.error_reply(event.stanza, "cancel", "not-allowed", "Communication with this domain is restricted")); end return true; end end, 100); module:hook("s2s-stream-features", function (event) if blacklist:contains(event.origin.from_host) then event.origin:close({ condition = "policy-violation"; text = "Communication with this domain is restricted"; }); end end, 1000);