log

age author description
Wed, 05 Apr 2023 19:38:59 +0100 Matthew Wild mod_sasl2_fast: Add API method to revoke FAST tokens for a given client
Tue, 04 Apr 2023 18:09:48 +0100 Matthew Wild mod_cloud_notify_filters: Fix traceback when invalid JIDs are submitted
Sat, 01 Apr 2023 13:56:53 +0100 Matthew Wild mod_client_management: Add XMPP and shell interfaces to fetch client list
Sat, 01 Apr 2023 13:56:15 +0100 Matthew Wild .luacheckrc: Add module.once
Sat, 01 Apr 2023 13:22:12 +0100 Matthew Wild mod_audit: Add a command to print the audit log on the command-line
Sat, 01 Apr 2023 13:11:53 +0100 Matthew Wild mod_audit: Support for adding location (GeoIP) to audit events
Sat, 01 Apr 2023 12:10:56 +0200 Jonas Schäfer mod_isolate_host: potentially pedantic optimization
Sat, 01 Apr 2023 12:03:08 +0200 Jonas Schäfer mod_isolate_host: handle server-generated stanzas
Fri, 31 Mar 2023 16:56:42 +0200 Jonas Schäfer mod_authz_delegate: make resistant against startup order issues
Thu, 30 Mar 2023 11:32:50 +0100 Matthew Wild mod_client_management: New module for users to view/manage permitted clients
Thu, 30 Mar 2023 12:06:18 +0200 Kim Alvefur mod_http_admin_api: Add roles to user schema in openapi
Thu, 30 Mar 2023 12:05:05 +0200 Kim Alvefur mod_http_admin_api: Fix types of numbers in openapi spec
Wed, 29 Mar 2023 17:55:29 +0200 Kim Alvefur Merge accidental extra head
Wed, 29 Mar 2023 17:52:21 +0200 Jonas Schäfer mod_vcard_muc: take roles into account for access check
Wed, 29 Mar 2023 17:21:45 +0200 Jonas Schäfer mod_authz_delegate: introduce module to "link" authorization of hosts
Wed, 29 Mar 2023 17:21:45 +0200 Jonas Schäfer mod_authz_delegate: introduce module to "link" authorization of hosts
Wed, 29 Mar 2023 16:13:42 +0100 Matthew Wild mod_sasl2_fast: Add an API that allows modules to check if a client has FAST
Wed, 29 Mar 2023 16:13:00 +0100 Matthew Wild mod_sasl2_fast: Add flag to FAST sasl_handler for easier identification
Wed, 29 Mar 2023 16:12:15 +0100 Matthew Wild mod_sasl2_fast: Fix harmless off-by-one error (invalidates existing tokens!)
Tue, 28 Mar 2023 21:04:23 +0200 Kim Alvefur mod_http_admin_api: Fix missing import
Tue, 28 Mar 2023 20:45:11 +0200 Kim Alvefur mod_http_admin_api: Tweak token session to please module:may()
Tue, 28 Mar 2023 12:43:05 +0100 Matthew Wild mod_sasl2_fast: Invalidate tokens issued prior to last password change
Mon, 27 Mar 2023 23:19:09 +0200 Kim Alvefur mod_rest: Add an example bash script for using mod_rest
Mon, 27 Mar 2023 18:51:12 +0100 Matthew Wild mod_http_oauth2: Update to use new API of Prosody mod_tokenauth @ 601d9a375b86
Fri, 24 Mar 2023 14:29:07 +0000 Matthew Wild mod_http_oauth2: Add support for refresh tokens
Sun, 26 Mar 2023 14:44:30 +0200 Kim Alvefur mod_http_oauth2: Declare additional client registration fields as strings
Sun, 26 Mar 2023 14:39:34 +0200 Kim Alvefur mod_http_oauth2: Stricten check of urlencoded form data
Sun, 26 Mar 2023 14:37:42 +0200 Kim Alvefur mod_http_oauth2: Pedantic optimization
Sat, 25 Mar 2023 20:18:05 +0100 Kim Alvefur mod_pubsub_feeds: Fix packaging of support library for installer
Fri, 17 Mar 2023 22:29:55 +0100 Kim Alvefur mod_muc_rtbl: Handle node purge
Fri, 24 Mar 2023 00:07:58 +0100 Kim Alvefur mod_http_oauth2: Fix traceback on missing 'scope' parameter
Thu, 23 Mar 2023 16:48:18 +0100 Kim Alvefur mod_http_oauth2: Focus username field automatically
Thu, 23 Mar 2023 16:28:08 +0100 Kim Alvefur mod_http_oauth2: Allow user to decide which requested scopes to grant
Thu, 23 Mar 2023 16:19:09 +0100 Kim Alvefur mod_http_oauth2: Use <fieldset> in templates because it looks nice
Thu, 23 Mar 2023 12:47:51 +0100 Kim Alvefur mod_rest: Update prosody_oauth.py example to non-legacy OAuth2
Wed, 22 Mar 2023 00:09:58 +0100 Kim Alvefur mod_http_oauth2: Remove another reference to obsolete function
Tue, 21 Mar 2023 22:29:47 +0100 Kim Alvefur mod_http_oauth2: Relax payload content type checking in revocation
Tue, 21 Mar 2023 22:23:28 +0100 Kim Alvefur mod_http_oauth2: Remove now unused code
Tue, 21 Mar 2023 22:02:38 +0100 Kim Alvefur mod_http_oauth2: Allow revoking a token without OAuth client credentials
Tue, 21 Mar 2023 21:57:18 +0100 Kim Alvefur mod_http_oauth2: Correctly verify OAuth client credentials on revocation
Tue, 21 Mar 2023 21:45:02 +0100 Kim Alvefur mod_http_oauth2: Group metadata section into OAuth and OpenID
Tue, 21 Mar 2023 21:36:54 +0100 Kim Alvefur mod_http_oauth2: Rename oauth client credential related functions
Tue, 21 Mar 2023 15:26:03 +0000 Matthew Wild mod_sasl2: Pull user-agent info into sasl_handler for later reference
Sun, 19 Mar 2023 22:21:41 +0100 Kim Alvefur mod_adhoc_oauth2_client: Update to call into mod_http_oauth2
Sun, 19 Mar 2023 22:13:27 +0100 Kim Alvefur mod_http_oauth2: Refactor to allow reuse of OAuth client creation
Thu, 16 Mar 2023 19:59:32 +0100 Kim Alvefur mod_http_oauth2: Fix userinfo status code off-by-one
Thu, 16 Mar 2023 19:28:44 +0100 Kim Alvefur mod_http_oauth2: Implement and return ID Token in authorization code flow
Thu, 16 Mar 2023 17:52:10 +0100 Kim Alvefur mod_http_oauth2: Reject non-local hosts in more code paths
Thu, 16 Mar 2023 17:06:35 +0100 Kim Alvefur mod_http_oauth2: Add support for the "openid" scope
Thu, 16 Mar 2023 17:03:48 +0100 Kim Alvefur mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes
Thu, 16 Mar 2023 14:27:46 +0100 Kim Alvefur mod_adhoc_oauth2_client: Make note in README about current broken state
Thu, 16 Mar 2023 00:06:43 +0100 Kim Alvefur mod_http_oauth2: Fix attempt to index a boolean value
Tue, 14 Mar 2023 18:59:39 +0000 Matthew Wild mod_audit: Allow disabling IP logging, or limiting it to a prefix
Tue, 14 Mar 2023 17:48:44 +0000 Matthew Wild mod_audit: Include client id in audit log entries (if known)
Tue, 14 Mar 2023 17:13:46 +0000 Matthew Wild mod_sasl2: Fire authentication-{success,failure} events like mod_saslauth
Tue, 14 Mar 2023 18:08:25 +0100 Kim Alvefur mod_http_oauth2: Record details of OAuth client a token is issued to
Sun, 12 Mar 2023 17:56:23 +0100 Kim Alvefur mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect
Sun, 12 Mar 2023 12:06:44 +0100 Kim Alvefur mod_http_oauth2: Validate all URIs against client_uri in client registration
Sun, 12 Mar 2023 11:27:29 +0100 Kim Alvefur mod_http_oauth2: Organize HTTP routes with comments
Sat, 11 Mar 2023 22:58:47 +0100 Kim Alvefur mod_http_oauth2: Fix validation of informative URIs
Sat, 11 Mar 2023 22:46:27 +0100 Kim Alvefur mod_http_oauth2: Use more compact IDs
Sat, 11 Mar 2023 22:31:02 +0100 Kim Alvefur mod_http_oauth2: Validate that informative URLs match the redirect URIs
Sat, 11 Mar 2023 22:25:50 +0100 Kim Alvefur mod_http_oauth2: Reject insecure redirect URIs
Sat, 11 Mar 2023 22:25:22 +0100 Kim Alvefur mod_http_oauth2: Validate that redirect URIs are absolute
Sat, 11 Mar 2023 22:30:58 +0100 Kim Alvefur mod_http_oauth2: Validate basic URI syntax of redirect URIs
Sat, 11 Mar 2023 20:20:37 +0000 Matthew Wild mod_spam_report_forwarder: Forward spam/abuse reports to one or more JIDs
Sat, 11 Mar 2023 21:13:00 +0100 Kim Alvefur mod_http_oauth2: Require URL to client informational page in registration
Sat, 11 Mar 2023 21:11:50 +0100 Kim Alvefur mod_http_oauth2: Reorder client metadata validation schema
Sat, 11 Mar 2023 18:41:49 +0000 Matthew Wild mod_firewall: Add 'REPORT TO' to report (XEP-0377) a stanza to a specified JID
Sat, 11 Mar 2023 18:29:38 +0000 Matthew Wild mod_firewall: README: Clarify docs about some of the stanza processing actions
Sat, 11 Mar 2023 16:40:24 +0000 Matthew Wild mod_firewall: Warn about invalid pubsubitemid list specification
Sat, 11 Mar 2023 16:40:09 +0000 Matthew Wild mod_firewall: Fix parsing of pubsubitemid list specification
Fri, 10 Mar 2023 12:03:23 +0100 Kim Alvefur mod_http_oauth2: Fix to disable disabled response handlers correctly
Fri, 10 Mar 2023 12:01:52 +0100 Kim Alvefur mod_http_oauth2: Log flows enabled and disabled
Fri, 10 Mar 2023 11:54:30 +0100 Kim Alvefur mod_http_oauth2: Fix appending of query parts in error redirects
Thu, 09 Mar 2023 14:46:06 +0100 Kim Alvefur mod_http_oauth2: Implement the OpenID userinfo endpoint
Thu, 09 Mar 2023 13:15:13 +0100 Kim Alvefur mod_http_oauth2: Close site header tags
Tue, 07 Mar 2023 23:55:33 +0100 Kim Alvefur mod_http_oauth2: Fix contrast of links on consent page
Tue, 07 Mar 2023 15:33:07 +0000 Matthew Wild mod_http_oauth2: token endpoint: handle missing credentials
Tue, 07 Mar 2023 15:31:19 +0000 Matthew Wild mod_http_oauth2: Fail early when no authorization header present
Tue, 07 Mar 2023 15:27:50 +0000 Matthew Wild mod_http_oauth2: Support HTTP Basic auth on token endpoint
Tue, 07 Mar 2023 15:18:41 +0000 Matthew Wild mod_http_oauth2: Separate extracting credentials from requests and verifying
Tue, 07 Mar 2023 14:52:43 +0000 Matthew Wild mod_http_oauth2: Reflect ALL attributes of the client registration
Tue, 07 Mar 2023 14:59:45 +0100 Kim Alvefur mod_rest: Point URLs to mod_http_oauth2 in demo mode
Tue, 07 Mar 2023 13:19:19 +0000 Matthew Wild mod_http_oauth2: Improve handling of redirect_uri matching and fallback
Tue, 07 Mar 2023 13:14:25 +0100 Kim Alvefur mod_http_oauth2: Correct field name for HTTP response status code
Tue, 07 Mar 2023 10:27:40 +0000 Matthew Wild mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
Tue, 07 Mar 2023 10:26:57 +0000 Matthew Wild mod_cloud_notify: Add note about Lua version requirements to README
Tue, 07 Mar 2023 10:24:58 +0000 Matthew Wild mod_cloud_notify: Log warning when used on Lua 5.1
Mon, 06 Mar 2023 16:53:27 +0100 Kim Alvefur mod_http_oauth2: Remove authorization codes after use
Mon, 06 Mar 2023 16:49:43 +0100 Kim Alvefur mod_http_oauth2: Fix authorization code logic
Mon, 06 Mar 2023 15:55:11 +0100 Kim Alvefur mod_http_oauth2: Include html templates in package for plugin installer
Thu, 23 Feb 2023 00:30:59 +0100 Kim Alvefur mod_conversejs: This one weird trick updates options on reload
Mon, 06 Mar 2023 10:37:43 +0000 Matthew Wild mod_http_oauth2: Switch to '303 See Other' redirects
Mon, 06 Mar 2023 10:29:14 +0000 Matthew Wild mod_http_oauth2: Allow non-HTTPS on localhost URLs
Mon, 06 Mar 2023 09:46:58 +0000 Matthew Wild mod_http_oauth2: Add authentication, consent and error pages
Mon, 06 Mar 2023 09:40:17 +0000 Matthew Wild mod_http_oauth: Factor out issuer URL calculation to a helper function
Sun, 05 Mar 2023 12:38:20 +0100 Kim Alvefur mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ)
Sat, 04 Mar 2023 23:36:13 +0100 Kim Alvefur mod_http_oauth2: Specify host for which to retrieve list of roles
Sat, 04 Mar 2023 21:36:00 +0100 Kim Alvefur mod_http_oauth2: Return list of active roles in discovery
Sat, 04 Mar 2023 21:24:35 +0100 Kim Alvefur mod_http_oauth2: Return actually enabled response types in discovery
Sat, 04 Mar 2023 17:06:47 +0100 Kim Alvefur mod_http_oauth2: Calculate client secret expiry in registration response
Sat, 04 Mar 2023 13:23:26 +0000 Matthew Wild mod_http_oauth2: Strip trailing '/' from issuer URL
Fri, 03 Mar 2023 22:54:46 +0100 Kim Alvefur mod_http_oauth2: Advertise endpoints that are enabled
Fri, 03 Mar 2023 22:48:59 +0100 Kim Alvefur mod_http_oauth2: Separate client_secret verification key from JWT key
Fri, 03 Mar 2023 22:48:38 +0100 Kim Alvefur mod_http_oauth2: Fix response type config
Fri, 03 Mar 2023 22:48:14 +0100 Kim Alvefur mod_http_oauth2/README: Document config options
Fri, 03 Mar 2023 22:03:50 +0100 Kim Alvefur mod_http_oauth2: Remove error message
Fri, 03 Mar 2023 21:45:24 +0100 Kim Alvefur mod_http_oauth2: Mention name of client when giving out OOB authorization code
Fri, 03 Mar 2023 21:45:05 +0100 Kim Alvefur mod_http_oauth2: Comment on mutation by other module
Fri, 03 Mar 2023 21:14:19 +0100 Kim Alvefur mod_http_oauth2: Implement stateless dynamic client registration
Fri, 03 Mar 2023 19:21:38 +0000 Matthew Wild mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207)
Fri, 03 Mar 2023 18:00:28 +0100 Kim Alvefur mod_http_oauth2: Derive scope from correct user details
Fri, 03 Mar 2023 14:22:05 +0100 Kim Alvefur mod_http_oauth2: Fix to actually return OOB response
Fri, 03 Mar 2023 11:24:05 +0000 Matthew Wild mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash)
Thu, 02 Mar 2023 23:59:09 +0100 Kim Alvefur mod_http_oauth2: Implement OOB special redirect URI in code flow
Thu, 02 Mar 2023 23:57:29 +0100 Kim Alvefur mod_http_oauth2: Add settings for allowed grant and response types
Thu, 02 Mar 2023 22:06:50 +0100 Kim Alvefur mod_http_oauth2: Implement the Implicit flow
Thu, 02 Mar 2023 22:00:42 +0100 Kim Alvefur mod_http_oauth2: Fix treatment of 'redirect_uri' parameter in code flow
Thu, 02 Mar 2023 11:38:57 +0100 Kim Alvefur mod_s2s_whitelist/README: Show inclusion in modules_enabled in example