spec/scansion/vcard_temp.scs
author Kim Alvefur <zash@zash.se>
Thu, 22 Jul 2021 17:18:39 +0200
branch0.11
changeset 11716 d117b92fd8e4
parent 9527 1f6f3b941eb1
child 12971 53b0730093d8
permissions -rw-r--r--
MUC: Fix logic for access to affiliation lists Fixes https://prosody.im/security/advisory_20210722/ Backs out 4d7b925652d9

# XEP-0054 vCard-temp writable and readable by anyone
# mod_scansion_record on host 'localhost' recording started 2018-10-20T15:00:12Z

[Client] Romeo
	jid: romeo@localhost
	password: password

[Client] Juliet
	jid: juliet@localhost
	password: password

-----

Romeo connects

# Romeo sets his vCard
# FN and N are required by the schema and mod_vcard_legacy will always inject them
Romeo sends:
	<iq id="lx3" type="set">
		<vCard xmlns="vcard-temp">
			<FN>Romeo Montague</FN>
			<N>
				<FAMILY>Montague</FAMILY>
				<GIVEN>Romeo</GIVEN>
				<MIDDLE/>
				<PREFIX/>
				<SUFFIX/>
			</N>
		</vCard>
	</iq>

Romeo receives:
	<iq type="result" id="lx3" to="${Romeo's full JID}"/>

Romeo sends:
	<iq id="lx4" type="get">
		<vCard xmlns="vcard-temp"/>
	</iq>

Romeo receives:
	<iq type="result" id="lx4" to="${Romeo's full JID}">
		<vCard xmlns="vcard-temp">
			<FN>Romeo Montague</FN>
			<N>
				<FAMILY>Montague</FAMILY>
				<GIVEN>Romeo</GIVEN>
				<MIDDLE/>
				<PREFIX/>
				<SUFFIX/>
			</N>
		</vCard>
	</iq>

Romeo disconnects

Juliet connects

Juliet sends:
	<iq type="get" id="lx3" to="romeo@localhost">
		<vCard xmlns="vcard-temp"/>
	</iq>

# Juliet can see Romeo's vCard since it's public
Juliet receives:
	<iq type="result" from="romeo@localhost" id="lx3" to="${Juliet's full JID}">
		<vCard xmlns="vcard-temp">
			<FN>Romeo Montague</FN>
			<N>
				<FAMILY>Montague</FAMILY>
				<GIVEN>Romeo</GIVEN>
				<MIDDLE/>
				<PREFIX/>
				<SUFFIX/>
			</N>
		</vCard>
	</iq>

Juliet disconnects

# recording ended on 2018-10-20T15:02:14Z