Mercurial > prosody-modules
view mod_tos/README.md @ 5548:fd3c12c40cd9
mod_http_oauth2: Disable CORS for authorization endpoint
Per recommendation in draft-ietf-oauth-security-topics-23
Hopefully it is enough to return an error status, since mod_http will
add CORS headers from a handler with higher priority, even for OPTIONS.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 16 Jun 2023 00:05:57 +0200 |
parents | 7f61d89a594d |
children |
line wrap: on
line source
# mod_tos A very drafty module to implement some kind of Terms of Service acceptance tool. Currently, this only works with clients implementing this very drafty protocol. The result of the experiments will be an update to the [ToS ProtoXEP](https://xmpp.org/extensions/inbox/tos.html), with the goal of acceptance.