mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 05:37:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_auth_internal_*: Apply saslprep to passwords

Browse source 
Related to #1560
This commit is contained in:
Kim Alvefur 2020-05-23 14:17:04 +02:00
parent a7083d1ded
commit 71c6728e69
3 changed files with 25 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
plugins/mod_auth_internal_hashed.lua
View file

@ -15,6 +15,7 @@ local generate_uuid = require "util.uuid".generate;
local new_sasl = require "util.sasl".new;
local hex = require"util.hex";
local to_hex, from_hex = hex.to, hex.from;
local saslprep = require "util.encodings".stringprep.saslprep;
local log = module._log;
local host = module.host;
@ -32,9 +33,13 @@ local provider = {};
function provider.test_password(username, password)
log("debug", "test password for user '%s'", username);
local credentials = accounts:get(username) or {};
password = saslprep(password);
if not password then
return nil, "Password fails SASLprep.";
end
if credentials.password ~= nil and string.len(credentials.password) ~= 0 then
if credentials.password ~= password then
if saslprep(credentials.password) ~= password then
return nil, "Auth failed. Provided password is incorrect.";
end