prosody
54953b5a214b
util/sasl/plain.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Diff

util/sasl/plain.lua @ 10913:54953b5a214b 0.11

util.sasl.plain: Apply saslprep to stored password Fixes something like #1560 here too. The password sent by the user already had saslprep applied.
author Kim Alvefur <zash@zash.se>
date Fri, 22 May 2020 21:05:45 +0200
parent 8555:4f0f5b49bb03
child 12945:d2c1c327a4d1
line wrap: on
line diff
--- a/util/sasl/plain.lua	Fri May 22 20:59:01 2020 +0200
+++ b/util/sasl/plain.lua	Fri May 22 21:05:45 2020 +0200
@@ -70,7 +70,7 @@
 	if self.profile.plain then
 		local correct_password;
 		correct_password, state = self.profile.plain(self, authentication, self.realm);
-		correct = (correct_password == password);
+		correct = (saslprep(correct_password) == password);
 	elseif self.profile.plain_test then
 		correct, state = self.profile.plain_test(self, authentication, password, self.realm);
 	end