aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* util.set: Add missing remove function in Teal specKim Alvefur2023-03-311-0/+1
|
* net.http: Rename enum in Teal spec to avoid name clashKim Alvefur2023-03-311-2/+2
|
* moduleapi: Add luacheck annotation to suppress warning about unused selfMatthew Wild2023-04-011-1/+1
| | | | | This is a convenience function, and there is currently no module-specific code required to implement it. Not using 'self' is to be expected.
* moduleapi: Add module:once() to execute a function after module load/startupMatthew Wild2023-04-011-0/+5
| | | | | | | | | | It is a common pattern for modules to do something like check for prosody.start_time, and execute code immediately if it is present, or wait for the server-started event if it isn't yet. For example, this allows you to run code after all other modules/hosts have been loaded, that are going to be loaded. Such code can now be replaced with a simple call to this method.
* util.startup: Add prosody.started promise to easily execute code after startupMatthew Wild2023-04-011-3/+14
| | | | | | | | | To avoid a race where server-started fires before the promise function body is run (on next tick), I moved server-started to fire on the next tick, which seems sensible anyway. Errors are logged, I'm not sure if we ought to be doing something more here. I'm sure we'll find out.
* mod_admin_shell: Allow matching on host or bare JID in c2s:showKim Alvefur2023-03-311-2/+2
| | | | | Only supporting exact match on full JID isn't helpful if you want to list sessions per host or user.
* mod_invites: Record roles as ordered list, first becoming primary roleKim Alvefur2023-03-301-4/+4
| | | | For mod_invites_register to apply on user creation.
* mod_invites_register: Allow roles to be an ordered list, first being primaryKim Alvefur2023-03-301-1/+14
| | | | | | Part of an update to mod_invites and friends to the new authz and roles. Invites with roles in the old way will need to be migrated, but with invites often being short lived it is probably not a long-lived problem.
* mod_tokenauth: Add API to inspect individual grants or all of a user's grantsMatthew Wild2023-03-291-0/+18
|
* mod_tokenauth: Move grant validation to a reusable functionMatthew Wild2023-03-291-6/+25
|
* sessionmanager: Preserve 'since' property of original session after resumptionMatthew Wild2023-03-291-0/+1
|
* util.session: Add 'since' property with timestamp of session creationMatthew Wild2023-03-291-0/+2
|
* mod_tokenauth: fix traceback if password has never been changedJonas Schäfer2023-03-281-1/+1
| | | | | By checking the password_updated_at for non-nilness before using it, we avoid a nasty crash :-).
* teal-src/README: Words on Compiling to LuaKim Alvefur2023-03-281-0/+17
|
* teal-src/README: Tweak markdown syntaxKim Alvefur2023-03-281-1/+3
|
* mod_tokenauth: Fire events on grant creation and revocationMatthew Wild2023-03-281-1/+13
|
* teal-src: Add a README with a few pointers to get startedKim Alvefur2023-03-281-0/+29
|
* teal-src: Add keyval+ store typeMatthew Wild2023-03-281-0/+1
|
* mod_tokenauth: Fix storage API mistake in revocationKim Alvefur2023-03-281-1/+1
|
* mod_tokenauth: Fix traceback when checking expiry of tokens with no expiryMatthew Wild2023-03-271-1/+2
|
* mod_tokenauth: Refactor API to separate tokens and grantsMatthew Wild2023-03-271-115/+92
| | | | | | | This is another iteration on top of the previous sub-tokens work. Essentially, the concept of a "parent token" has been replaced with the concept of a "grant" to which all tokens now belong. The grant does not have any tokens when first created, but the create_token() call can add them.
* mod_tokenauth: Support for creating sub-tokensMatthew Wild2023-03-261-22/+110
| | | | | | | | | | | | | | | | Properties of sub-tokens: - They share the same id as their parent token - Sub-tokens may not have their own sub-tokens (but may have sibling tokens) - They always have the same or shorter lifetime compared to their parent token - Revoking a parent token revokes all sub-tokens - Sub-tokens always have the same JID as the parent token - They do not have their own 'accessed' property - accessing a sub-token updates the parent token's accessed time Although this is a generic API, it is designed to at least fill the needs of OAuth2 refresh + access tokens (where the parent token is the refresh token and the sub-tokens are access tokens).
* mod_tokenauth: return error if storage of new token failsMatthew Wild2023-03-261-1/+4
|
* moduleapi: Add 'peek' to :may() and new :could() helper to suppress loggingMatthew Wild2023-03-261-7/+19
| | | | | | | | | | | | | The current method logs scary "access denied" messages on failure - this is generally very useful when debugging access control stuff, but in some cases the call is simply a check to see if someone *could* perform an action, even if they haven't requested it yet. One example is determining whether to show the user as an admin in disco. The 'peek' parameter, if true, will suppress such logging. The :could() method is just a simple helper that can make the calling code a bit more readable (suggested by Zash).
* moduleapi: may: Fail early if a local session has no role assignedMatthew Wild2023-03-251-3/+8
| | | | | | | We expect every session to explicitly have a role assigned. Falling back to any kind of "default" role (even the user's default role) in the absence of an explicit role could open up the possibility of accidental privilege escalation.
* core.usermanager: Correct formatting of not implemented errorKim Alvefur2023-03-262-5/+5
| | | | Spaces, no hyphen, apparently.
* mod_admin_shell: Enable user after creation with roleKim Alvefur2023-03-261-0/+5
| | | | | Fixes that otherwise the user was created in a disabled state and left as such.
* mod_admin_shell: Simplify user creation when no role givenKim Alvefur2023-03-261-8/+16
| | | | | | Idea here is to prevent a user from being created with the default role if a different role was given, but that dance wouldn't be needed if no role is provided.
* util.jsonschema: Reorder type definition by specification, sectionKim Alvefur2023-03-261-14/+37
| | | | Also some comment headers and missing properties
* util.jsonschema: Implement 'dependentSchemas'Kim Alvefur2023-03-263-1/+18
| | | | | If this object key exists then this schema must validate against the current object. Seems useful.
* util.jsonschema: Implement 'dependentRequired'Kim Alvefur2023-03-263-1/+24
| | | | If this field exists, then these fields must also exist.
* util.roles: Implement a serialization preparation metamethodKim Alvefur2023-03-261-0/+13
| | | | | | Should be able to roundtrip trough serialization. Also nice for debug and logging purposes where you might want more details than what the __tostring method provides.
* util.set: Add a serialization preparation metamethodKim Alvefur2023-03-261-0/+9
| | | | | | Enables util.serialization to turn Sets into a representation that can be deserialized with an environment trick, i.e. `set{"a","b"}`. Also useful for debug purposes.
* util.format: Update tests for serialization changesKim Alvefur2023-03-261-5/+5
|
* util.format: Restore "freeze" serialization behavior in loggingKim Alvefur2023-03-261-0/+1
| | | | | | This was implied with the "debug" preset and does nice things like turn util.set objects into "set{a,b,c}" instead of the quite verbose thing you get otherwise.
* util.format: Tweak serialization of %q formatted entriesKim Alvefur2023-03-261-1/+8
| | | | | | | Improves serialization of function references especially, the built-in default handling of that in util.serialization is not the most informative. Now, along with the function metatable from util.startup, the actual function can be found by filename and line number.
* util.startup: Tweak function string representationKim Alvefur2023-03-261-1/+1
| | | | | Mostly in order to avoid triggering the XML syntax highlighting in the console logger.
* mod_server_contact_info: Reorder dataform keys for more aligned viewKim Alvefur2023-03-241-9/+10
|
* mod_tokenauth: Track last access time (last time a token was used)Matthew Wild2023-03-241-3/+15
|
* teal: Move into prosody namespaceKim Alvefur2023-03-2361-20/+20
|
* CHANGES: The Great Rename-ning completed! #1223Kim Alvefur2023-03-171-0/+1
|
* plugins: Prefix module imports with prosody namespaceKim Alvefur2023-03-24100-503/+503
|
* util: Add compat for prosody module name change to C sourcesKim Alvefur2023-03-1714-14/+64
|
* util: Prefix module imports with prosody namespaceKim Alvefur2023-03-1768-246/+246
|
* net: Prefix module imports with prosody namespaceKim Alvefur2023-03-1720-108/+108
|
* tests: Make tests work with new namespace prefixKim Alvefur2023-03-171-2/+2
|
* core: Prefix module imports with prosody namespaceKim Alvefur2023-03-1715-103/+103
|
* executables: Prefix module imports with prosody namespaceKim Alvefur2023-03-172-21/+21
|
* mod_debug_reset: Remove unused importMatthew Wild2023-03-231-1/+0
|
* scansion: Enable mod_debug_reset during testsMatthew Wild2023-03-231-0/+3
|
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 10:34:51 +0000