log

age author description
2023-03-21 Kim Alvefur mod_http_oauth2: Group metadata section into OAuth and OpenID
2023-03-21 Kim Alvefur mod_http_oauth2: Rename oauth client credential related functions
2023-03-21 Matthew Wild mod_sasl2: Pull user-agent info into sasl_handler for later reference
2023-03-19 Kim Alvefur mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
2023-03-19 Kim Alvefur mod_http_oauth2: Refactor to allow reuse of OAuth client creation
2023-03-16 Kim Alvefur mod_http_oauth2: Fix userinfo status code off-by-one
2023-03-16 Kim Alvefur mod_http_oauth2: Implement and return ID Token in authorization code flow
2023-03-16 Kim Alvefur mod_http_oauth2: Reject non-local hosts in more code paths
2023-03-16 Kim Alvefur mod_http_oauth2: Add support for the "openid" scope
2023-03-16 Kim Alvefur mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes
2023-03-16 Kim Alvefur mod_adhoc_oauth2_client: Make note in README about current broken state
2023-03-15 Kim Alvefur mod_http_oauth2: Fix attempt to index a boolean value
2023-03-14 Matthew Wild mod_audit: Allow disabling IP logging, or limiting it to a prefix
2023-03-14 Matthew Wild mod_audit: Include client id in audit log entries (if known)
2023-03-14 Matthew Wild mod_sasl2: Fire authentication-{success,failure} events like mod_saslauth
2023-03-14 Kim Alvefur mod_http_oauth2: Record details of OAuth client a token is issued to
2023-03-12 Kim Alvefur mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect
2023-03-12 Kim Alvefur mod_http_oauth2: Validate all URIs against client_uri in client registration
2023-03-12 Kim Alvefur mod_http_oauth2: Organize HTTP routes with comments
2023-03-11 Kim Alvefur mod_http_oauth2: Fix validation of informative URIs
2023-03-11 Kim Alvefur mod_http_oauth2: Use more compact IDs
2023-03-11 Kim Alvefur mod_http_oauth2: Validate that informative URLs match the redirect URIs
2023-03-11 Kim Alvefur mod_http_oauth2: Reject insecure redirect URIs
2023-03-11 Kim Alvefur mod_http_oauth2: Validate that redirect URIs are absolute
2023-03-11 Kim Alvefur mod_http_oauth2: Validate basic URI syntax of redirect URIs
2023-03-11 Matthew Wild mod_spam_report_forwarder: Forward spam/abuse reports to one or more JIDs
2023-03-11 Kim Alvefur mod_http_oauth2: Require URL to client informational page in registration
2023-03-11 Kim Alvefur mod_http_oauth2: Reorder client metadata validation schema
2023-03-11 Matthew Wild mod_firewall: Add 'REPORT TO' to report (XEP-0377) a stanza to a specified JID
2023-03-11 Matthew Wild mod_firewall: README: Clarify docs about some of the stanza processing actions
2023-03-11 Matthew Wild mod_firewall: Warn about invalid pubsubitemid list specification
2023-03-11 Matthew Wild mod_firewall: Fix parsing of pubsubitemid list specification
2023-03-10 Kim Alvefur mod_http_oauth2: Fix to disable disabled response handlers correctly
2023-03-10 Kim Alvefur mod_http_oauth2: Log flows enabled and disabled
2023-03-10 Kim Alvefur mod_http_oauth2: Fix appending of query parts in error redirects
2023-03-09 Kim Alvefur mod_http_oauth2: Implement the OpenID userinfo endpoint
2023-03-09 Kim Alvefur mod_http_oauth2: Close site header tags
2023-03-07 Kim Alvefur mod_http_oauth2: Fix contrast of links on consent page
2023-03-07 Matthew Wild mod_http_oauth2: token endpoint: handle missing credentials
2023-03-07 Matthew Wild mod_http_oauth2: Fail early when no authorization header present
2023-03-07 Matthew Wild mod_http_oauth2: Support HTTP Basic auth on token endpoint
2023-03-07 Matthew Wild mod_http_oauth2: Separate extracting credentials from requests and verifying
2023-03-07 Matthew Wild mod_http_oauth2: Reflect ALL attributes of the client registration
2023-03-07 Kim Alvefur mod_rest: Point URLs to mod_http_oauth2 in demo mode
2023-03-07 Matthew Wild mod_http_oauth2: Improve handling of redirect_uri matching and fallback
2023-03-07 Kim Alvefur mod_http_oauth2: Correct field name for HTTP response status code
2023-03-07 Matthew Wild mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
2023-03-07 Matthew Wild mod_cloud_notify: Add note about Lua version requirements to README
2023-03-07 Matthew Wild mod_cloud_notify: Log warning when used on Lua 5.1
2023-03-06 Kim Alvefur mod_http_oauth2: Remove authorization codes after use
2023-03-06 Kim Alvefur mod_http_oauth2: Fix authorization code logic
2023-03-06 Kim Alvefur mod_http_oauth2: Include html templates in package for plugin installer
2023-02-22 Kim Alvefur mod_conversejs: This one weird trick updates options on reload
2023-03-06 Matthew Wild mod_http_oauth2: Switch to '303 See Other' redirects
2023-03-06 Matthew Wild mod_http_oauth2: Allow non-HTTPS on localhost URLs
2023-03-06 Matthew Wild mod_http_oauth2: Add authentication, consent and error pages