view mod_telnet_tlsinfo/mod_telnet_tlsinfo.lua @ 5448:9d542e86e19a

mod_http_oauth2: Allow requesting a subset of scopes on token refresh This enables clients to request access tokens with fewer permissions than the grant they were given, reducing impact of token leak. Clients could e.g. request access tokens with some privileges and immediately revoke them after use, or other strategies.
author Kim Alvefur <zash@zash.se>
date Thu, 11 May 2023 21:40:09 +0200
parents 832235cc1910
children
line wrap: on
line source

-- mod_telnet_tlsinfo.lua

module:set_global();
module:depends("admin_telnet");

local console_env = module:shared("/*/admin_telnet/env");
local c2s_sessions = module:shared("/*/c2s/sessions");
local s2s_sessions = module:shared("/*/s2s/sessions");

local function print_tlsinfo(print, session)
	if session.secure then
		local sock = session.conn:socket()
		for k,v in pairs(sock:info()) do
			print(("%20s: %s"):format(k, tostring(v)))
		end
	else
		print(("%20s: %s"):format("protocol", "TCP"))
	end
end

function console_env.c2s:showtls(pat)
	local print = self.session.print;
	for _, session in pairs(c2s_sessions) do
		if not pat or session.full_jid and session.full_jid:find(pat, nil, true) then
			print(session.full_jid or "unauthenticated")
			print_tlsinfo(print, session);
			print""
		end
	end
end

function console_env.s2s:showtls(pat)
	local print = self.session.print;
	for _, session in pairs(s2s_sessions) do
		if not pat or session.from_host == pat or session.to_host == pat then
			if session.direction == "outgoing" then
				print(session.from_host, "->", session.to_host)
			else
				print(session.to_host, "<-", session.from_host)
			end
			print_tlsinfo(print, session);
			print""
		end
	end
end