http://hg.omfa.de/prosody-modules/ en-us mod_auth_oauth_external/mod_auth_oauth_external.lua revision history http://hg.omfa.de/prosody-modules/log/6241b2f5e92f/mod_auth_oauth_external/mod_auth_oauth_external.lua
Attempt to reduce differences between SASL PLAIN and OAUTHBERARER code
paths, which overlap in the validation endpoint interaction and response
handling.]]> Kim Alvefur <zash@zash.se> Sat, 02 May 2026 17:11:49 +0200 http://hg.omfa.de/prosody-modules/log/1216f6befbe7/mod_auth_oauth_external/mod_auth_oauth_external.lua
Module does not work if both are unset.]]> Kim Alvefur <zash@zash.se> Sat, 02 May 2026 16:13:35 +0200 http://hg.omfa.de/prosody-modules/log/05d66fe6b289/mod_auth_oauth_external/mod_auth_oauth_external.lua
Trying to group settings a bit more.]]> Kim Alvefur <zash@zash.se> Sat, 02 May 2026 16:10:48 +0200 http://hg.omfa.de/prosody-modules/log/cab284eaeb81/mod_auth_oauth_external/mod_auth_oauth_external.lua
In case the storage driver has a problem, that problem is reported
instead of "Account not available"]]> Kim Alvefur <zash@zash.se> Wed, 18 Feb 2026 16:30:18 +0100 http://hg.omfa.de/prosody-modules/log/42866d42e267/mod_auth_oauth_external/mod_auth_oauth_external.lua
However, unless the user is also deleted from the OAuth provider, this
merely resets the account.]]> Kim Alvefur <zash@zash.se> Sat, 17 Jan 2026 05:16:25 +0100 http://hg.omfa.de/prosody-modules/log/9c110fbecd86/mod_auth_oauth_external/mod_auth_oauth_external.lua
This allows iterating over users as well as existence checks.]]> Kim Alvefur <zash@zash.se> Sat, 17 Jan 2026 05:14:25 +0100 http://hg.omfa.de/prosody-modules/log/97a9f939d472/mod_auth_oauth_external/mod_auth_oauth_external.lua Kim Alvefur <zash@zash.se> Wed, 07 Aug 2024 17:59:14 +0200 http://hg.omfa.de/prosody-modules/log/6592c444e85c/mod_auth_oauth_external/mod_auth_oauth_external.lua Kim Alvefur <zash@zash.se> Sat, 25 Nov 2023 01:09:01 +0100 http://hg.omfa.de/prosody-modules/log/0207fd248480/mod_auth_oauth_external/mod_auth_oauth_external.lua
Connection pooling may provide a performance boost since it does a few
requests per authentication.]]> Kim Alvefur <zash@zash.se> Sun, 12 Nov 2023 02:35:34 +0100 http://hg.omfa.de/prosody-modules/log/4e79f344ae2f/mod_auth_oauth_external/mod_auth_oauth_external.lua
For consistency.

The mangling should be made configurable in the future.]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 19:33:37 +0200 http://hg.omfa.de/prosody-modules/log/7480dde4cd2e/mod_auth_oauth_external/mod_auth_oauth_external.lua
Not providing some of these may trigger errors on use, which is
something that would be nice to fix on the Prosody side, one day.]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 19:11:25 +0200 http://hg.omfa.de/prosody-modules/log/82a14082be3f/mod_auth_oauth_external/mod_auth_oauth_external.lua
Mastodon for example having email addresses usernames in login, but a
different username in the service itself.

Thanks to @tcit@social.tcit.fr for the pointer to a usable validation
endpoint for Mastodon, allowing this to be tested.]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 13:52:31 +0200 http://hg.omfa.de/prosody-modules/log/721f79ac88d8/mod_auth_oauth_external/mod_auth_oauth_external.lua
This should probably be opt-in.]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 13:45:28 +0200 http://hg.omfa.de/prosody-modules/log/53f34e17d590/mod_auth_oauth_external/mod_auth_oauth_external.lua
This ... broke things. If brought back, it would need additional
validation.]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 13:43:59 +0200 http://hg.omfa.de/prosody-modules/log/49306afbf722/mod_auth_oauth_external/mod_auth_oauth_external.lua
This allows entering an email address as username in some clients by
escaping the @ as \40, enabling authentication against Mastodon]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 12:55:13 +0200 http://hg.omfa.de/prosody-modules/log/e7d99bacd0e8/mod_auth_oauth_external/mod_auth_oauth_external.lua
Needed by some OAuth servers, tested here with Mastodon]]> Kim Alvefur <zash@zash.se> Wed, 10 May 2023 12:39:05 +0200 http://hg.omfa.de/prosody-modules/log/b3e7886fea6a/mod_auth_oauth_external/mod_auth_oauth_external.lua
Whether this is needed may vary by OAuth provider. Mastodon for example
requires it.]]> Kim Alvefur <zash@zash.se> Mon, 08 May 2023 20:12:43 +0200 http://hg.omfa.de/prosody-modules/log/92ad8f03f225/mod_auth_oauth_external/mod_auth_oauth_external.lua
In this mode, only PLAIN is possible and the provided username is
assumed to be the XMPP localpart.]]> Kim Alvefur <zash@zash.se> Mon, 08 May 2023 20:01:34 +0200 http://hg.omfa.de/prosody-modules/log/b40299bbdf14/mod_auth_oauth_external/mod_auth_oauth_external.lua Kim Alvefur <zash@zash.se> Mon, 08 May 2023 19:57:10 +0200 http://hg.omfa.de/prosody-modules/log/d9bc8712a745/mod_auth_oauth_external/mod_auth_oauth_external.lua
Shorter and the .well-known part is, well, well-known.]]> Kim Alvefur <zash@zash.se> Thu, 16 Mar 2023 13:04:13 +0100 http://hg.omfa.de/prosody-modules/log/3390bb2f9f6c/mod_auth_oauth_external/mod_auth_oauth_external.lua
Might not be supported by the backend but PLAIN is the lowest common
denominator, so not having it would lock out a lot of clients.]]> Kim Alvefur <zash@zash.se> Thu, 16 Mar 2023 12:45:52 +0100 http://hg.omfa.de/prosody-modules/log/0a6d2b79a8bf/mod_auth_oauth_external/mod_auth_oauth_external.lua
But suddenly unsure whether this constitutes an OAuth "client" or
something else? Resource server maybe?]]> Kim Alvefur <zash@zash.se> Thu, 16 Mar 2023 12:45:22 +0100