http://hg.omfa.de/prosody-hg/ en-us prosody-hg: plugins/mod_auth_internal_hashed.lua history plugins/mod_auth_internal_hashed.lua revision history mod_auth_internal_{hashed,plain}: Respect flag for disabled accounts in test_password() http://hg.omfa.de/prosody-hg/log/1b81a7b7c9b8/plugins/mod_auth_internal_hashed.lua
This API method is used e.g. in HTTP modules which also should respect
disabled accounts.]]> Kim Alvefur <zash@zash.se> Fri, 09 Aug 2024 20:23:46 +0200 usermanager, mod_auth_internal_hashed: Support metadata when disabling a user http://hg.omfa.de/prosody-hg/log/1796370091d4/plugins/mod_auth_internal_hashed.lua
This allows us to store a time, actor, comment and/or reason why an account
was disabled, which seems a generally useful thing to support.]]> Matthew Wild <mwild1@gmail.com> Thu, 30 Nov 2023 09:47:00 +0000 plugins: Use integer config API with interval specification where sensible http://hg.omfa.de/prosody-hg/log/50324f66ca2a/plugins/mod_auth_internal_hashed.lua
Many of these fall into a few categories:
- util.cache size, must be >= 1
- byte or item counts that logically can't be negative
- port numbers that should be in 1..0xffff]]> Kim Alvefur <zash@zash.se> Mon, 17 Jul 2023 01:38:54 +0200 plugins: Use get_option_enum where appropriate http://hg.omfa.de/prosody-hg/log/173038306750/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Sat, 16 Jan 2021 21:04:58 +0100 plugins: Prefix module imports with prosody namespace http://hg.omfa.de/prosody-hg/log/74b9e05af71e/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Fri, 24 Mar 2023 13:15:28 +0100 mod_auth_internal_hashed: Shorten call path http://hg.omfa.de/prosody-hg/log/59478b295137/plugins/mod_auth_internal_hashed.lua
Why did it call a function defined in the same module through
usermanager?]]> Kim Alvefur <zash@zash.se> Sat, 18 Mar 2023 16:13:32 +0100 mod_auth_internal_hashed: Record time of account disable / re-enable http://hg.omfa.de/prosody-hg/log/3ab0bbb1dc35/plugins/mod_auth_internal_hashed.lua
Could be useful for e.g. #1772]]> Kim Alvefur <zash@zash.se> Sun, 12 Mar 2023 01:24:59 +0100 mod_auth_internal_hashed: Add oauthbearer handler to our SASL profile http://hg.omfa.de/prosody-hg/log/5a06d07596f9/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Wed, 01 Mar 2023 13:05:17 +0000 mod_auth_internal_hashed: Implement methods to enable and disable users http://hg.omfa.de/prosody-hg/log/13950bf92802/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Thu, 23 Feb 2023 14:44:35 +0100 mod_auth_internal_hashed: Implement is_enabled() method http://hg.omfa.de/prosody-hg/log/0a0a251bcd6c/plugins/mod_auth_internal_hashed.lua
Uses 'disabled' property already introduced in aed38948791f]]> Kim Alvefur <zash@zash.se> Thu, 23 Feb 2023 14:34:10 +0100 mod_auth_internal_hashed: Add stub methods for enabling and disabling users http://hg.omfa.de/prosody-hg/log/b884ddb5a0e7/plugins/mod_auth_internal_hashed.lua
But how and where?]]> Kim Alvefur <zash@zash.se> Wed, 22 Feb 2023 15:32:40 +0100 mod_auth_internal_hashed: Refactor to prepare for disabling users http://hg.omfa.de/prosody-hg/log/5484debdfdfe/plugins/mod_auth_internal_hashed.lua
Moving this out will make space for a dynamic check whether a particular
user is disabled or not, which is one possible response to abuse of
account privileges.]]> Kim Alvefur <zash@zash.se> Wed, 22 Feb 2023 13:27:08 +0100 mod_auth_internal_hashed: Allow creating disabled account without password http://hg.omfa.de/prosody-hg/log/aed38948791f/plugins/mod_auth_internal_hashed.lua
Otherwise, create_user(username, nil) leads to the account being
deleted.]]> Kim Alvefur <zash@zash.se> Thu, 18 Aug 2022 17:50:56 +0200 usermanager, mod_auth_*: Add get_account_info() returning creation/update time http://hg.omfa.de/prosody-hg/log/3f38f4735c7a/plugins/mod_auth_internal_hashed.lua
This is useful for a number of things. For example, listing users that need to
rotate their passwords after some event. It also provides a safer way for code
to determine that a user password has changed without needing to set a handler
for the password change event (which is a more fragile approach).]]> Matthew Wild <mwild1@gmail.com> Tue, 12 Jul 2022 13:14:47 +0100 util.hex: Deprecate to/from in favour of encode/decode, for consistency! http://hg.omfa.de/prosody-hg/log/a0ff5c438e9d/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Fri, 04 Mar 2022 15:22:45 +0000 mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438 http://hg.omfa.de/prosody-hg/log/593e823566e1/plugins/mod_auth_internal_hashed.lua
More security for less pain than switching to SCRAM-SHA-256

The XEP will likely be change to reference the RFC that will probably
come from draft-ietf-kitten-password-storage once it is ready, and then
we should update to follow that.]]> Kim Alvefur <zash@zash.se> Sun, 26 Dec 2021 16:51:04 +0100 mod_auth_internal_hashed: Make SCRAM iteration count configurable http://hg.omfa.de/prosody-hg/log/baa7cdde69a6/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Sun, 26 Dec 2021 16:37:50 +0100 Merge 0.11->trunk http://hg.omfa.de/prosody-hg/log/3bbb1af92514/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Thu, 13 May 2021 11:17:13 +0100 mod_auth_internal_{plain,hashed}: Use constant-time string comparison for secrets http://hg.omfa.de/prosody-hg/log/c98aebe601f9/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Mon, 10 May 2021 16:50:24 +0100 Merge 0.11->trunk http://hg.omfa.de/prosody-hg/log/c7ed8f754033/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Sat, 06 Jun 2020 00:54:28 +0200 mod_auth_internal_*: Apply saslprep to passwords http://hg.omfa.de/prosody-hg/log/0d7d71dee0a0/plugins/mod_auth_internal_hashed.lua
Related to #1560]]> Kim Alvefur <zash@zash.se> Sat, 23 May 2020 14:17:04 +0200 Merge 0.11->trunk http://hg.omfa.de/prosody-hg/log/e8db377a2983/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Tue, 24 Dec 2019 00:39:45 +0100 mod_auth_internal_hashed: Pass on errors from password hash function (fixes #1477) http://hg.omfa.de/prosody-hg/log/b1ca849b8e3a/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Mon, 23 Dec 2019 22:42:39 +0100 mod_auth_internal_hashed: Precompute SCRAM authentication profile name (thanks MattJ) http://hg.omfa.de/prosody-hg/log/d58925bb74ca/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Thu, 22 Aug 2019 01:00:31 +0200 mod_auth_internal_hashed: Add support for optionally using SCRAM-SHA-256 instead of SHA-1 http://hg.omfa.de/prosody-hg/log/e458578ddfd3/plugins/mod_auth_internal_hashed.lua
This will currently require a hard reset of all passwords back to plain.
This will be least painful on new deployments.]]> Kim Alvefur <zash@zash.se> Sun, 13 Jan 2019 14:02:56 +0100 core.usermanager, various modules: Disconnect other resources on password change (thanks waqas) (fixes #512) http://hg.omfa.de/prosody-hg/log/4354f556c5db/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Fri, 28 Jul 2017 13:15:29 +0200 mod_auth_internal_hashed: Split long lines [luacheck] http://hg.omfa.de/prosody-hg/log/cacf14c218ab/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Tue, 04 Apr 2017 01:26:26 +0200 mod_auth_internal_hashed: Rename unused 'self' to _ [luacheck] http://hg.omfa.de/prosody-hg/log/b08d9295f036/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Tue, 04 Apr 2017 01:26:09 +0200 mod_auth_internal_hashed: Use util.hex http://hg.omfa.de/prosody-hg/log/06cdd4afaaf9/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Mon, 18 May 2015 21:00:41 +0200 mod_auth_interal_hashed: Update salt and iteration count when setting a new password http://hg.omfa.de/prosody-hg/log/e9147a16059d/plugins/mod_auth_internal_hashed.lua Florian Zeitz <florob@babelmonkeys.de> Wed, 12 Feb 2014 13:45:16 +0100 mod_auth_internal_hashed: Log calls to provider methods and be consistent with mod_auth_internal_plain http://hg.omfa.de/prosody-hg/log/02217725454b/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Sat, 10 Aug 2013 20:19:40 +0200 mod_auth_internal_hashed: Use logger setup by moduleapi instead of going for util.logger directly http://hg.omfa.de/prosody-hg/log/3a81e3b0ea4f/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Sat, 10 Aug 2013 20:17:45 +0200 mod_auth_internal_hashed: Remove this 'initializing' message too http://hg.omfa.de/prosody-hg/log/f449da907b85/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Sat, 10 Aug 2013 20:15:25 +0200 Remove all trailing whitespace http://hg.omfa.de/prosody-hg/log/bd0ff8ae98a8/plugins/mod_auth_internal_hashed.lua Florian Zeitz <florob@babelmonkeys.de> Fri, 09 Aug 2013 17:48:21 +0200 mod_auth_internal_hashed, mod_auth_internal_plain, mod_privacy, mod_private, mod_register, mod_vcard, mod_muc: Use module:open_store() http://hg.omfa.de/prosody-hg/log/eeea0eb2602a/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Fri, 19 Apr 2013 16:14:06 +0200 mod_auth_internal_plain, mod_auth_internal_hashed: No need to nodeprep here. http://hg.omfa.de/prosody-hg/log/52fe5df91c65/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Tue, 22 Jan 2013 08:26:08 +0500 mod_auth_internal_{plain,hashed}: Add support for iterating over accounts http://hg.omfa.de/prosody-hg/log/6b08c922a2e4/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Fri, 21 Sep 2012 17:26:12 +0200 mod_auth_*: Use module:provides(). http://hg.omfa.de/prosody-hg/log/2c7e1ce8f482/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Wed, 12 Sep 2012 21:41:51 +0500 mod_auth_internal_hashed: Get rid of useless wrapper function new_hashpass_provider. http://hg.omfa.de/prosody-hg/log/5f9066db1b4d/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Wed, 12 Sep 2012 21:40:00 +0500 mod_auth_internal_hashed: Remove COMPAT code (upgrading old hashed storage format from pre-0.8) http://hg.omfa.de/prosody-hg/log/0df5b2d5dff3/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Sat, 28 Apr 2012 03:59:31 +0100 mod_auth_internal_hashed: Remove unused imports http://hg.omfa.de/prosody-hg/log/322b7335fbf3/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Sat, 28 Apr 2012 03:55:25 +0100 mod_auth_internal_{plain,hashed}: Clarify log messages on initialization http://hg.omfa.de/prosody-hg/log/6900c9484834/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Sun, 11 Mar 2012 20:56:09 +0000 mod_auth_*: Get rid of undocumented and broken 'sasl_realm' config option. http://hg.omfa.de/prosody-hg/log/f08f649b898b/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Wed, 23 Feb 2011 01:34:46 +0500 mod_auth_internal_*: Support for delete_user method http://hg.omfa.de/prosody-hg/log/42899d5efe3b/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Tue, 04 Jan 2011 17:12:28 +0000 util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks. http://hg.omfa.de/prosody-hg/log/2b0b8fe68df2/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Mon, 27 Dec 2010 19:57:04 +0500 mod_auth_internal_hashed: Fix deleting users http://hg.omfa.de/prosody-hg/log/8cf30367aa4f/plugins/mod_auth_internal_hashed.lua Kim Alvefur <zash@zash.se> Mon, 16 Aug 2010 18:51:22 +0200 usermanager, mod_auth_internal_hashed, mod_legacyauth: New order of parameters for usermanager.test_password - username, host, password http://hg.omfa.de/prosody-hg/log/e736f68c1047/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Wed, 21 Jul 2010 21:01:36 +0100 mod_auth_internal_hashed: Fixed SCRAM-SHA-1 mechanism to not traceback on non-existent users. http://hg.omfa.de/prosody-hg/log/9e2485880cd6/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Sat, 17 Jul 2010 19:34:06 +0500 mod_auth_internal, mod_auth_internal_hashed: Remove checking for nil or empty password and pretending it means the user doesn't exist. Hopefully with more success than Custer. http://hg.omfa.de/prosody-hg/log/f13306ce3417/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Thu, 08 Jul 2010 20:59:53 +0100 mod_auth_internal_hashed: Update TODO comments to COMPAT http://hg.omfa.de/prosody-hg/log/180a0b3b018d/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Tue, 22 Jun 2010 20:54:15 +0100 mod_auth_internal_hashed: Remove far too many instances of inline hex conversion using gsub, which was creating useless closures and what-not http://hg.omfa.de/prosody-hg/log/1a84d7d6f667/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Tue, 22 Jun 2010 20:52:43 +0100 mod_auth_internal, mod_auth_internal_hashed: Remove is_admin method from providers http://hg.omfa.de/prosody-hg/log/e425e27c12be/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Tue, 22 Jun 2010 19:14:55 +0100 mod_auth_internal_hashed: Log as "auth_internal_hashed", not as "usermanager". http://hg.omfa.de/prosody-hg/log/342fd8f8ccd9/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Tue, 15 Jun 2010 09:12:49 +0500 mod_auth_internal_hashed: Don't assume user doesn't exist if no recognizable authentication data is found. http://hg.omfa.de/prosody-hg/log/c1b687a5818d/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Tue, 15 Jun 2010 09:11:10 +0500 mod_auth_internal_hashed: Removed all checks for Cyrus SASL. http://hg.omfa.de/prosody-hg/log/8f5d76cc4162/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Tue, 15 Jun 2010 09:08:02 +0500 mod_auth_internal_hashed: Fixed a traceback in account creation. http://hg.omfa.de/prosody-hg/log/dc7131d4e189/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Sun, 13 Jun 2010 04:07:38 +0500 mod_auth_internal{,_hashed}: Update is_admin to only report the admin status of the current host (ignores global admin rights), fixes global access traceback http://hg.omfa.de/prosody-hg/log/fd06023cbdcc/plugins/mod_auth_internal_hashed.lua Matthew Wild <mwild1@gmail.com> Wed, 09 Jun 2010 21:25:59 +0100 mod_auth_internal_hashed: Removed some useless code. http://hg.omfa.de/prosody-hg/log/d4d0519cd0c1/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Wed, 09 Jun 2010 22:01:47 +0500 Merge with Tobias. http://hg.omfa.de/prosody-hg/log/a69d8021b1db/plugins/mod_auth_internal_hashed.lua Waqas Hussain <waqas20@gmail.com> Wed, 09 Jun 2010 21:34:32 +0500 mod_auth_internal_hashed: Empty hashpass after conversion to stored_key/server_key and store new authentication database. http://hg.omfa.de/prosody-hg/log/c85bba8bd41a/plugins/mod_auth_internal_hashed.lua Tobias Markmann <tm@ayena.de> Wed, 09 Jun 2010 17:58:20 +0200