mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-06 06:37:37 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_auth_internal_*: Apply saslprep to passwords

Browse source 
Related to #1560
This commit is contained in:
Kim Alvefur 2020-05-23 14:17:04 +02:00
parent a7083d1ded
commit 71c6728e69
3 changed files with 25 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
plugins/mod_auth_internal_plain.lua
View file

@ -8,6 +8,7 @@
local usermanager = require "core.usermanager";
local new_sasl = require "util.sasl".new;
local saslprep = require "util.encodings".stringprep.saslprep;
local log = module._log;
local host = module.host;
@ -20,8 +21,12 @@ local provider = {};
function provider.test_password(username, password)
log("debug", "test password for user '%s'", username);
local credentials = accounts:get(username) or {};
password = saslprep(password);
if not password then
return nil, "Password fails SASLprep.";
end
if password == credentials.password then
if password == saslprep(credentials.password) then
return true;
else
return nil, "Auth failed. Invalid username or password.";
@ -35,6 +40,10 @@ end
function provider.set_password(username, password)
log("debug", "set_password for username '%s'", username);
password = saslprep(password);
if not password then
return nil, "Password fails SASLprep.";
end
local account = accounts:get(username);
if account then
account.password = password;
@ -57,6 +66,10 @@ function provider.users()
end
function provider.create_user(username, password)
password = saslprep(password);
if not password then
return nil, "Password fails SASLprep.";
end
return accounts:set(username, {password = password});
end