prosody
d943733c6d01
plugins/mod_tokenauth.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Diff

plugins/mod_tokenauth.lua @ 13006:d943733c6d01

mod_tokenauth: fix traceback if password has never been changed By checking the password_updated_at for non-nilness before using it, we avoid a nasty crash :-).
author Jonas Schäfer <jonas@wielicki.name>
date Tue, 28 Mar 2023 21:25:54 +0200
parent 13003:34ed17ef1c1a
child 13009:a70ff0c524c9
line wrap: on
line diff
--- a/plugins/mod_tokenauth.lua	Tue Mar 28 11:42:20 2023 +0200
+++ b/plugins/mod_tokenauth.lua	Tue Mar 28 21:25:54 2023 +0200
@@ -174,7 +174,7 @@
 	-- Invalidate grants from before last password change
 	local account_info = usermanager.get_account_info(token_user, module.host);
 	local password_updated_at = account_info and account_info.password_updated;
-	if grant.created < password_updated_at and password_updated_at then
+	if password_updated_at and grant.created < password_updated_at then
 		module:log("debug", "Token grant issued before last password change, invalidating it now");
 		token_store:set_key(token_user, token_id, nil);
 		return nil, "not-authorized";