Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | mod_http: Allow setting the CORS credentials flag via :provides API | Kim Alvefur | 2019-12-30 | 1 | -1/+9 |
| | | | | | | | | | | | E.g. module:provides("http", { cors = { credentials = true; }; route = { ... }; }); | ||||
* | mod_http_errors: Style tweak | Kim Alvefur | 2021-02-21 | 1 | -3/+3 |
| | | | | | Weird to have the background all the way to the edge of the viewport. Would be nice if this could be done without the extra span. | ||||
* | mod_http_file_share: Return a message from the base URL | Kim Alvefur | 2021-02-21 | 1 | -0/+9 |
| | |||||
* | mod_websocket: Use mod_http_errors html template #1172 | Kim Alvefur | 2021-02-21 | 1 | -4/+12 |
| | | | | Same as the prior commit to mod_bosh | ||||
* | mod_bosh: Include warning if endpoint accessed insecurely (#1172) | Kim Alvefur | 2021-02-21 | 1 | -0/+1 |
| | | | | | | | This is to make it obvious if a misconfigured a proxy or the request really is insecure. Perhaps it should also check c2s_require_encryption? | ||||
* | mod_bosh: Use message template from mod_http_error | Kim Alvefur | 2021-02-21 | 1 | -11/+9 |
| | | | | | | Looking Good! And most importantly, consistent. | ||||
* | mod_http_errors: Add a highlighted warning to template | Kim Alvefur | 2021-02-21 | 1 | -0/+3 |
| | | | | | | | It looks sooooo good! Meant to be used by e.g. mod_bosh to warn in case the request is considered insecure. | ||||
* | mod_http_errors: Add way to reuse the error page template | Kim Alvefur | 2021-02-21 | 1 | -0/+7 |
| | | | | | | | | | | module:fire_event("http-message", {title = "hello"; message = "world"}) Goal is to enable consistent messages from Prosody. Not necessarily error messages, but warnings or just notices. This does cause some drift in the purpose of mod_http_errors, but that's okay. | ||||
* | mod_http_errors: Minify CSS | Kim Alvefur | 2021-02-18 | 1 | -25/+6 |
| | | | | Because It looks too big in view source! | ||||
* | Merge 0.11->trunk | Kim Alvefur | 2021-02-18 | 0 | -0/+0 |
|\ | |||||
| * | mod_http: Fix trusted proxies check (thanks buildbot) | Kim Alvefur | 2021-02-18 | 1 | -1/+1 |
| | | | | | | | | | | is_trusted_proxy() is only in trunk, I dun goofed when I rebased 8603011e51fe from trunk. | ||||
* | | mod_http: Optimize proxy IP check | Kim Alvefur | 2021-02-18 | 1 | -0/+3 |
| | | | | | | | | | | No need to do a subnet match comparison to see if two IP addresses match exactly. | ||||
* | | mod_websocket: Inherit security status from http request | Kim Alvefur | 2021-02-18 | 1 | -1/+1 |
| | | | | | | | | | | | | | | Allows requests considered secure becasue of a proxy header to carry over to the client session. mod_bosh does this too. | ||||
* | | mod_http: Consider x-forwarded-proto from trusted proxies | Kim Alvefur | 2021-02-18 | 1 | -0/+4 |
| | | | | | | | | | | | | | | Should be better than setting consider_{bosh,websocket}_secure as that may end up causing actually insecure requests to be considered secure. Doing it here, as with IP, should make this apply to all HTTP modules. | ||||
* | | Merge 0.11->trunk | Kim Alvefur | 2021-02-18 | 1 | -1/+1 |
|\| | |||||
| * | mod_http: Skip IP resolution in non-proxied case | Kim Alvefur | 2021-02-18 | 1 | -1/+1 |
| | | | | | | | | | | Skips doing the whole get_ip_from_request() dance if the request isn't from a proxy at all, even if the client sent the header for some reason. | ||||
* | | mod_csi_simple: Fire event when flushing queue | Kim Alvefur | 2021-02-16 | 1 | -0/+1 |
| | | | | | | | | | | To let other plugins know and take some action, e.g. flushing other buffers or whatnot. | ||||
* | | mod_csi_simple: Set session state to 'flushing' while doing so | Kim Alvefur | 2021-02-16 | 1 | -1/+3 |
| | | | | | | | | May be useful for 3rd party modules. | ||||
* | | Merge 0.11->trunk | Kim Alvefur | 2021-02-15 | 1 | -0/+1 |
|\| | |||||
| * | Tag 0.11.8 | Kim Alvefur | 2021-02-15 | 0 | -0/+0 |
| | | |||||
| * | mod_pep: Advertise base pubsub feature (fixes #1632)0.11.8 | Kim Alvefur | 2021-02-15 | 1 | -0/+1 |
| | | | | | | | | | | Noticed while discussing feature discovery in Gajim Thanks lovetox | ||||
* | | mod_http_file_share: Prevent attempt to upload again after completion | Kim Alvefur | 2021-02-13 | 1 | -0/+9 |
| | | |||||
* | | mod_http_file_share: Support sending 100 Continue | Kim Alvefur | 2021-02-13 | 1 | -0/+3 |
| | | | | | | | | | | E.g. curl will ask for this when sending large uploads. Removes a delay while it waits for an error or go-agead. | ||||
* | | net.http.server: Don't pause early streaming uploads | Kim Alvefur | 2021-02-13 | 1 | -1/+10 |
| | | | | | | | | | | | | | | Fixes that otherwise it would wait for the request to be done after receiving the head of the request, when it's meant to select a target for where to store the data, instead of waiting after receiving the request for when the request has been handled. | ||||
* | | net.http.server: Allow storing more than the parser in the session | Kim Alvefur | 2021-02-12 | 1 | -10/+11 |
| | | | | | | | | Storing the async thread on the connection was weird. | ||||
* | | net.http.server: Enable async during HTTP request handling (fixes #1487) | Kim Alvefur | 2020-07-12 | 1 | -28/+23 |
| | | |||||
* | | util.datamanager: Add basic tests | Kim Alvefur | 2021-02-09 | 1 | -0/+76 |
| | | | | | | | | | | Test all the things! Somewhat covered by the storagemanager tests, but we don't currently don't have that automated as it needs SQL engines. | ||||
* | | util.datamanager: Support iterating over any file extension | Kim Alvefur | 2021-02-07 | 1 | -4/+3 |
| | | | | | | | | | | | | | | | | The 'typ' argument to all other functions is the actual file extension, but not here for some reason. May need this for iterating over the .bin files created by mod_http_file_share in the future. | ||||
* | | core.certmanager: Add comments explaining the 'verifyext' TLS settings | Kim Alvefur | 2021-02-06 | 1 | -1/+4 |
| | | | | | | | | | | | | | | Thanks to debacle for reminding me, in the context of mod_auth_ccert I wonder if we still need lsec_ignore_purpose, Let's Encrypt seems to include both client and server purposes in certs. | ||||
* | | mod_s2s: Clarify comment about unused TLS settings | Kim Alvefur | 2021-02-06 | 1 | -1/+3 |
| | | | | | | | | Ref 115b5e32d960 | ||||
* | | util.cache: Add test for :table (fails on Lua 5.1) | Kim Alvefur | 2021-02-05 | 1 | -0/+24 |
| | | |||||
* | | mod_admin_shell: Add help section with (top level) MUC commands | Kim Alvefur | 2021-02-05 | 1 | -0/+6 |
| | | | | | | | | These were previously only documented on the site. | ||||
* | | mod_admin_shell: Pretty-print HTTP endpoints in a human table | Kim Alvefur | 2021-02-03 | 1 | -1/+7 |
| | | | | | | | | Attempted readability improvement | ||||
* | | mod_admin_shell: Remove previous print() call | Kim Alvefur | 2021-02-03 | 1 | -1/+0 |
| | | | | | | | | Accident involving Mercurial interactive commit | ||||
* | | mod_admin_shell: List modules providing each HTTP endpoint | Kim Alvefur | 2021-02-03 | 1 | -0/+3 |
| | | |||||
* | | mod_admin_shell: List global HTTP endpoints by default | Kim Alvefur | 2021-02-03 | 1 | -2/+7 |
| | | | | | | | | Trick copied from the module commands | ||||
* | | scansion tests: Give a title to HTTP Upload test | Kim Alvefur | 2021-02-03 | 1 | -0/+2 |
| | | |||||
* | | mod_c2s: Reflect stream 'from' attribute back if set (fix #1625) | Kim Alvefur | 2021-02-03 | 1 | -1/+1 |
| | | | | | | | | Clients should *not* be setting this before TLS anyways. | ||||
* | | util.xmppstream: Ensure stream 'id' is always present (fix #1626) | Kim Alvefur | 2021-02-03 | 1 | -1/+1 |
| | | | | | | | | Backout c2d144d3f8dd | ||||
* | | mod_http_file_share: Collect cache hit/miss statistics for downloads | Kim Alvefur | 2021-02-02 | 1 | -1/+5 |
| | | |||||
* | | mod_http_file_share: Measure how long it takes to prune expired files | Kim Alvefur | 2021-02-02 | 1 | -0/+3 |
| | | |||||
* | | mod_http_file_share: Collect statistics of files uploaded | Kim Alvefur | 2021-02-02 | 1 | -0/+3 |
| | | |||||
* | | mod_storage_sql: Implement map-like API for archives | Kim Alvefur | 2021-02-01 | 2 | -2/+49 |
| | | | | | | | | | | | | | | | | Used by mod_http_file_share, muc moderation, etc. Tests tweaked because they failed on stanza internals that happen becasue of re-serialization. Namespaces differ since inheritance is implicit when building but explicit after parsing. | ||||
* | | storage: Test reverse-ordered queries | Kim Alvefur | 2021-02-01 | 1 | -0/+22 |
| | | |||||
* | | util.adhoc: Propagate error with producing initial initial data | Kim Alvefur | 2021-01-31 | 1 | -1/+7 |
| | | | | | | | | Bonus: Allow use of util.error tables | ||||
* | | adhoc.lib: Tweak to allow using util.error objects | Kim Alvefur | 2021-01-31 | 1 | -1/+1 |
| | | | | | | | | | | | | Since util.stanza supports util.error objects via duck-typing and adhoc errors look enough like util.error objects, they should able to pass as such. This will allow converting adhoc commands to use util.error. | ||||
* | | mod_http_file_share: Reorder arguments | Kim Alvefur | 2021-01-31 | 1 | -2/+2 |
| | | | | | | | | | | 'filetype' is optional, so having it last seems sensible. 'slot' is pretty important, so moving it earlier seems sensible. | ||||
* | | mod_http_file_share: Update cached value while it is reasonably fresh | Kim Alvefur | 2021-01-31 | 1 | -5/+10 |
| | | | | | | | | | | This should ensure that cache entries until the oldest file that counted to the last 24h becomes older than 24h. | ||||
* | | mod_http_file_share: Cache quotas to avoid hitting storage | Kim Alvefur | 2021-01-31 | 1 | -2/+12 |
| | | |||||
* | | mod_http_file_share: Split out some variables for later reuse | Kim Alvefur | 2021-01-31 | 1 | -1/+3 |
| | |