Software / code / prosody
Diff
util/sasl/oauthbearer.lua @ 12918:ed20555f163a
util.sasl.oauthbearer: Fix traceback on authz in unexpected format
E.g. if you were to just pass "username" without @hostname, the split
will return nil, "username" and the nil gets passed to saslprep() and it
does not like that.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Thu, 02 Mar 2023 14:37:46 +0100 |
| parent | 12911:ab1164eda011 |
| child | 12936:b796e08e6376 |
line wrap: on
line diff
--- a/util/sasl/oauthbearer.lua Wed Mar 01 18:43:54 2023 +0000 +++ b/util/sasl/oauthbearer.lua Thu Mar 02 14:37:46 2023 +0100 @@ -34,6 +34,10 @@ local username = jid.prepped_split(gs2_authzid); + if not username or username == "" then + return "failure", "malformed-request", "Expected authorization identity in the username@hostname format"; + end + -- SASLprep username username = saslprep(username);
