Mercurial > prosody-modules
view mod_s2s_auth_compat/mod_s2s_auth_compat.lua @ 5550:4fda06be6b08
mod_http_oauth2: Make note about handling repeated
RFC 6749 states
> If an authorization code is used more than once, the authorization
> server MUST deny the request and SHOULD revoke (when possible) all
> tokens previously issued based on that authorization code.
We should follow the SHOULD.
The MUST is already covered by removing the code state from the cache.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 16 Jun 2023 00:10:46 +0200 |
| parents | 21e81fcb8896 |
| children |
line wrap: on
line source
-- COMPAT for Openfire sending stream headers without to or from. module:set_global(); module:hook("s2s-check-certificate", function(event) local session, host = event.session, event.host; if not event.host then (session.log or module._log)("warn", "Invalid stream header, certificate will not be trusted") session.cert_chain_status = "invalid" return true end end, 100);
