57 Commits (master)

Author	SHA1	Message	Date
Kim Alvefur	4ca636bb7e	mod_disco: Advertise disco#info and #items on bare JIDs to fix #1664 ... Having to add these in *there* places seems less than ideal. I would also think that advertising disco#info is a bit redundant, since it is a requirement for everything in XMPP and if it was missing you would get an error back.	2 years ago
Kim Alvefur	c9e223e4f7	spelling: non-existing mistakes (thanks timeless)	4 years ago
Kim Alvefur	98922d54b1	plugins: Prefix module imports with prosody namespace	3 years ago
Matthew Wild	d73714b4f4	Switch to a new role-based authorization framework, removing is_admin() ... We began moving away from simple "is this user an admin?" permission checks before 0.12, with the introduction of mod_authz_internal and the ability to dynamically change the roles of individual users. The approach in 0.12 still had various limitations however, and apart from the introduction of roles other than "admin" and the ability to pull that info from storage, not much actually changed. This new framework shakes things up a lot, though aims to maintain the same functionality and behaviour on the surface for a default Prosody configuration. That is, if you don't take advantage of any of the new features, you shouldn't notice any change. The biggest change visible to developers is that usermanager.is_admin() (and the auth provider is_admin() method) have been removed. Gone. Completely. Permission checks should now be performed using a new module API method: module:may(action_name, context) This method accepts an action name, followed by either a JID (string) or (preferably) a table containing 'origin'/'session' and 'stanza' fields (e.g. the standard object passed to most events). It will return true if the action should be permitted, or false/nil otherwise. Modules should no longer perform permission checks based on the role name. E.g. a lot of code previously checked if the user's role was prosody:admin before permitting some action. Since many roles might now exist with similar permissions, and the permissions of prosody:admin may be redefined dynamically, it is no longer suitable to use this method for permission checks. Use module:may(). If you start an action name with ':' (recommended) then the current module's name will automatically be used as a prefix. To define a new permission, use the new module API: module:default_permission(role_name, action_name) module:default_permissions(role_name, { action_name[, action_name...] }) This grants the specified role permission to execute the named action(s) by default. This may be overridden via other mechanisms external to your module. The built-in roles that developers should use are: - prosody:user (normal user) - prosody:admin (host admin) - prosody:operator (global admin) The new prosody:operator role is intended for server-wide actions (such as shutting down Prosody). Finally, all usage of is_admin() in modules has been fixed by this commit. Some of these changes were trickier than others, but no change is expected to break existing deployments. EXCEPT: mod_auth_ldap no longer supports the ldap_admin_filter option. It's very possible nobody is using this, but if someone is then we can later update it to pull roles from LDAP somehow.	4 years ago
Kim Alvefur	022a48a578	mod_disco: Optionally return info on admin accounts to non-contacts ... If you already know the account, from say the server contact info, then this confirms their admin status.	5 years ago
Kim Alvefur	657290679d	mod_disco: Advertise anonymous users ... Can these even be seen?	6 years ago
Kim Alvefur	182816c1ae	mod_disco: Advertise admin accounts as such via disco identity	6 years ago
Kim Alvefur	a049793c95	mod_disco: Send XEP-0115 caps in s2s stream features ... Not currently used for anything, but allowed and could be used in the future and might be used by other servers.	4 years ago
Kim Alvefur	d741e95ccd	mod_disco: Add some spacing to improve readability and code navigation	5 years ago
Kim Alvefur	26cd73ad68	mod_disco: Skip code specific to disco on user accounts (avoids invoking usermanager, fixes #1150)	8 years ago
Emmanuel Gil Peyrot	00d9da2914	mod_disco: Simplify iq handling by hooking on iq-get/ instead of iq/.	7 years ago
Emmanuel Gil Peyrot	f3887c158b	mod_disco: Add an account/registered identity on subscribed accounts, fixes #826.	9 years ago
Kim Alvefur	8a2a50c07a	mod_disco: Correctly set the 'node' attr (fixes #449)	9 years ago
Kim Alvefur	46863c65b3	mod_disco: Advertise in stream-features after auth (probably what was meant in 200f1f6306a7) (fixes #957)	9 years ago
Kim Alvefur	c95b62d5e2	mod_disco: Rename variables to avoid name clash [luacheck]	9 years ago
Kim Alvefur	c3d7d52f0d	plugins/various: Use type-specific config API	9 years ago
Kim Alvefur	aedd689b72	mod_disco: Update to account for new intermediate session type (from 9f70d35a1602)	9 years ago
Florian Zeitz	1d833bb807	Remove all trailing whitespace	13 years ago
Matthew Wild	96466999c1	mod_disco: Check for host type == 'local' ('normal' never existed)	13 years ago
Florian Zeitz	8d3f90ac45	mod_disco: Allow ansering disco requests including nodes, and adding custom items to disco#items requests	13 years ago
Florian Zeitz	421bdc4399	mod_disco: Emit events for disco requests, which contain a node, on user accounts	13 years ago
Matthew Wild	18fc86713e	hostmanager, mod_disco: Show optional 'name' option from the config in disco#items queries (fixes use-case in #292) (thanks diSabler, mva)	14 years ago
Matthew Wild	8b103580ec	mod_disco: Allow configurable name in disco identity (defaults to 'Prosody')	14 years ago
Kim Alvefur	f0ec18a8b7	core.modulemanager, mod_disco: Add support for XEP-0128: Service Discovery Extensions	15 years ago
Waqas Hussain	9ed0c32abd	mod_disco: Don't add caps hash to stream features on unauthenticated connections.	15 years ago
Waqas Hussain	8ed206d1d1	mod_disco: Don't add caps hash to stream features on unauthenticated connections.	15 years ago
Waqas Hussain	69270394ef	mod_disco: Fixed: Service discovery features were not being removed on module unload (issue #205).	15 years ago
Waqas Hussain	b553d5d289	mod_disco: Fixed: Service discovery features were not being removed on module unload (issue #205).	15 years ago
Waqas Hussain	7016b4e0cd	mod_disco: Updated to use hostmanager.get_children instead of componentmanager.get_children.	15 years ago
Waqas Hussain	e01f4792e9	mod_disco: Renamed the 'session' property of the account-disco-info and account-disco-items events to 'origin' for consistency.	15 years ago
Waqas Hussain	8293d237d5	mod_disco: Reflect requested 'node' attribute in the disco#info reply.	16 years ago
Waqas Hussain	8c6fe5a36d	mod_disco: Respond to disco#info to the correct caps hash node ("node#ver").	16 years ago
Waqas Hussain	47fc58cc4b	mod_disco: Cache disco#info reply and caps hash for host, return correct caps hash, and respond to disco#info to the caps hash node.	16 years ago
Matthew Wild	4eefb92a0a	mod_disco: Support for putting the server's caps hash in stream:features to allow the client to cache disco#info for the server instead of requesting it at each login.	16 years ago
Matthew Wild	2bc0606453	Update copyright headers for 2010	16 years ago
Waqas Hussain	54ca722e47	mod_disco: Added option 'disco_items' to allow appending items to a host's disco#items result.	16 years ago
Waqas Hussain	0453ec49b8	mod_disco: Handle and fire events for service discovery queries for bare account JIDs (thanks darkrain).	16 years ago
Waqas Hussain	64787ed9eb	mod_disco: Rearranged some lines, and added a FIXME comment	17 years ago
Waqas Hussain	6bb3a75b16	mod_disco: Removed reference to core.discomanager	17 years ago
Waqas Hussain	562ba73c2a	mod_disco: Removed legacy IQ hooks	17 years ago
Waqas Hussain	18d8c7ecfd	mod_disco: Handle disco#items queries using new APIs	17 years ago
Waqas Hussain	444cc01f25	mod_disco: Added identity server/im with name 'Prosody'	17 years ago
Waqas Hussain	4e038edbe7	mod_disco: Handle disco#info queries using new APIs	17 years ago
Matthew Wild	118883d655	Remove version number from copyright headers	17 years ago
Matthew Wild	6ce464add2	mod_disco: Convert from Windows line endings	17 years ago
Matthew Wild	c80f91dc02	0.3->0.4	17 years ago
Matthew Wild	c5ee166aa9	Update copyright notices for 2009	17 years ago
Matthew Wild	f2d020191f	0.2->0.3	17 years ago
Matthew Wild	bf3b96204d	GPL->MIT!	17 years ago
Matthew Wild	d3ad4a5123	0.1 -> 0.2	17 years ago