Mercurial > prosody-modules
annotate mod_csi_simple_compat/mod_csi_simple_compat.lua @ 6165:e977174082ee
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:24:30 +0000 |
| parents | fcea7cf91702 |
| children |
| rev | line source |
|---|---|
|
4006
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
1 local st = require "util.stanza"; |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
2 |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
3 local important_payloads = module:get_option_set("csi_important_payloads", { }); |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
4 |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
5 module:hook("csi-is-stanza-important", function (event) |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
6 local stanza = event.stanza; |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
7 if st.is_stanza(stanza) then |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
8 for important in important_payloads do |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
9 if stanza:find(important) then |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
10 return true; |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
11 end |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
12 end |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
13 end |
|
fcea7cf91702
mod_csi_simple_compat: Module for Prosody 0.11 that adds a setting available from Prosody 0.12
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
14 end); |
