mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 21:57:45 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

util.sasl.oauthbearer: Adjust parsing of GS2 to allow lack of authzid

Browse source 
Partly copied from util.sasl.scram and then reduced a bit.
This commit is contained in:
Kim Alvefur 2023-03-16 13:45:49 +01:00
parent 8aecd19812
commit 2331fc8b65
2 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
util/sasl/anonymous.lua
View file

@ -33,8 +33,8 @@ local function anonymous(self, message) -- luacheck: ignore 212/message
local username; local username;
repeat repeat
username = generate_random_id():lower(); username = generate_random_id():lower();
until self.profile.anonymous(self, username, self.realm); self.username = username;
self.username = username; until self.profile.anonymous(self, username, self.realm, message);
return "success" return "success"
end end

5
util/sasl/oauthbearer.lua
View file

@ -11,10 +11,11 @@ local function oauthbearer(self, message)
return "failure", "not-authorized"; return "failure", "not-authorized";
end end
local gs2_authzid, kvpairs = message:match("n,a=([^,]+),(.+)$"); local gs2_header, kvpairs = message:match("^(n,[^,]*,),(.+)$");
if not gs2_authzid then if not gs2_header then
return "failure", "malformed-request"; return "failure", "malformed-request";
end end
local gs2_authzid = gs2_header:match("^[^,]*,a=([^,]*),$");
local auth_header; local auth_header;
for k, v in kvpairs:gmatch("([a-zA-Z]+)=([\033-\126 \009\r\n]*)\001") do for k, v in kvpairs:gmatch("([a-zA-Z]+)=([\033-\126 \009\r\n]*)\001") do