| 2023-03-12 |
Kim Alvefur |
mod_http_oauth2: Validate all URIs against client_uri in client registration
|
| 2023-03-12 |
Kim Alvefur |
mod_http_oauth2: Organize HTTP routes with comments
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Fix validation of informative URIs
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Use more compact IDs
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Validate that informative URLs match the redirect URIs
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Reject insecure redirect URIs
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Validate that redirect URIs are absolute
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Validate basic URI syntax of redirect URIs
|
| 2023-03-11 |
Matthew Wild |
mod_spam_report_forwarder: Forward spam/abuse reports to one or more JIDs
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Require URL to client informational page in registration
|
| 2023-03-11 |
Kim Alvefur |
mod_http_oauth2: Reorder client metadata validation schema
|
| 2023-03-11 |
Matthew Wild |
mod_firewall: Add 'REPORT TO' to report (XEP-0377) a stanza to a specified JID
|
| 2023-03-11 |
Matthew Wild |
mod_firewall: README: Clarify docs about some of the stanza processing actions
|
| 2023-03-11 |
Matthew Wild |
mod_firewall: Warn about invalid pubsubitemid list specification
|
| 2023-03-11 |
Matthew Wild |
mod_firewall: Fix parsing of pubsubitemid list specification
|
| 2023-03-10 |
Kim Alvefur |
mod_http_oauth2: Fix to disable disabled response handlers correctly
|
| 2023-03-10 |
Kim Alvefur |
mod_http_oauth2: Log flows enabled and disabled
|
| 2023-03-10 |
Kim Alvefur |
mod_http_oauth2: Fix appending of query parts in error redirects
|
| 2023-03-09 |
Kim Alvefur |
mod_http_oauth2: Implement the OpenID userinfo endpoint
|
| 2023-03-09 |
Kim Alvefur |
mod_http_oauth2: Close site header tags
|
| 2023-03-07 |
Kim Alvefur |
mod_http_oauth2: Fix contrast of links on consent page
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: token endpoint: handle missing credentials
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: Fail early when no authorization header present
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: Support HTTP Basic auth on token endpoint
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: Separate extracting credentials from requests and verifying
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: Reflect ALL attributes of the client registration
|
| 2023-03-07 |
Kim Alvefur |
mod_rest: Point URLs to mod_http_oauth2 in demo mode
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: Improve handling of redirect_uri matching and fallback
|
| 2023-03-07 |
Kim Alvefur |
mod_http_oauth2: Correct field name for HTTP response status code
|
| 2023-03-07 |
Matthew Wild |
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
|
| 2023-03-07 |
Matthew Wild |
mod_cloud_notify: Add note about Lua version requirements to README
|
| 2023-03-07 |
Matthew Wild |
mod_cloud_notify: Log warning when used on Lua 5.1
|
| 2023-03-06 |
Kim Alvefur |
mod_http_oauth2: Remove authorization codes after use
|
| 2023-03-06 |
Kim Alvefur |
mod_http_oauth2: Fix authorization code logic
|
| 2023-03-06 |
Kim Alvefur |
mod_http_oauth2: Include html templates in package for plugin installer
|
| 2023-02-22 |
Kim Alvefur |
mod_conversejs: This one weird trick updates options on reload
|
| 2023-03-06 |
Matthew Wild |
mod_http_oauth2: Switch to '303 See Other' redirects
|
| 2023-03-06 |
Matthew Wild |
mod_http_oauth2: Allow non-HTTPS on localhost URLs
|
| 2023-03-06 |
Matthew Wild |
mod_http_oauth2: Add authentication, consent and error pages
|
| 2023-03-06 |
Matthew Wild |
mod_http_oauth: Factor out issuer URL calculation to a helper function
|
| 2023-03-05 |
Kim Alvefur |
mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ)
|
| 2023-03-04 |
Kim Alvefur |
mod_http_oauth2: Specify host for which to retrieve list of roles
|
| 2023-03-04 |
Kim Alvefur |
mod_http_oauth2: Return list of active roles in discovery
|
| 2023-03-04 |
Kim Alvefur |
mod_http_oauth2: Return actually enabled response types in discovery
|
| 2023-03-04 |
Kim Alvefur |
mod_http_oauth2: Calculate client secret expiry in registration response
|
| 2023-03-04 |
Matthew Wild |
mod_http_oauth2: Strip trailing '/' from issuer URL
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Advertise endpoints that are enabled
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Separate client_secret verification key from JWT key
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Fix response type config
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2/README: Document config options
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Remove error message
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Mention name of client when giving out OOB authorization code
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Comment on mutation by other module
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Implement stateless dynamic client registration
|
| 2023-03-03 |
Matthew Wild |
mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207)
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Derive scope from correct user details
|
| 2023-03-03 |
Kim Alvefur |
mod_http_oauth2: Fix to actually return OOB response
|
| 2023-03-03 |
Matthew Wild |
mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash)
|
| 2023-03-02 |
Kim Alvefur |
mod_http_oauth2: Implement OOB special redirect URI in code flow
|
| 2023-03-02 |
Kim Alvefur |
mod_http_oauth2: Add settings for allowed grant and response types
|
