# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1677675771 0
# Node ID 2b4661bd39e2eda25ed3b376950a8279e8cfb720
# Parent  012fa81d1f5d36b64308ab013d3478f0468687e4
mod_tokenauth: Add some sanity checking of the new optional parameters

diff -r 012fa81d1f5d -r 2b4661bd39e2 plugins/mod_tokenauth.lua
--- a/plugins/mod_tokenauth.lua	Wed Mar 01 13:01:21 2023 +0000
+++ b/plugins/mod_tokenauth.lua	Wed Mar 01 13:02:51 2023 +0000
@@ -25,6 +25,10 @@
 		return nil, "invalid-host";
 	end
 
+	if (token_data and type(token_data) ~= "table") or (token_purpose and type(token_purpose ~= "string")) then
+		return nil, "bad-request";
+	end
+
 	local token_info = {
 		owner = actor_jid;
 		created = os.time();