annotate mod_saslname/mod_saslname.lua @ 5401:c8d04ac200fc

mod_http_oauth2: Reject loopback URIs as client_uri This really should be a proper website with info, https://localhost is not good enough. Ideally we'd validate that it's got proper DNS and is actually reachable, but triggering HTTP or even DNS lookups seems like it would carry abuse potential that would best to avoid.
author Kim Alvefur <zash@zash.se>
date Tue, 02 May 2023 16:20:55 +0200
parents e927d95512e8
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1271
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 local hostname = module:get_option_string("sasl_hostname", module.host);
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 module:hook("stream-features", function(event)
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 local features = event.features;
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 local mechs = features:get_child("mechanisms", "urn:ietf:params:xml:ns:xmpp-sasl");
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 if mechs then
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 mechs:tag("hostname", { xmlns = "urn:xmpp:domain-based-name:1" })
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 :text(hostname):up();
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9 end
e927d95512e8 mod_saslname: XEP-0233 implementation
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10 end);