# HG changeset patch # User Kim Alvefur # Date 1590174345 -7200 # Node ID 54953b5a214bfd7560b5f5666a1400dc1dc0baec # Parent 646af16a3f3265506f733bc1b56062cc18d859bd util.sasl.plain: Apply saslprep to stored password Fixes something like #1560 here too. The password sent by the user already had saslprep applied. diff -r 646af16a3f32 -r 54953b5a214b util/sasl/plain.lua --- a/util/sasl/plain.lua Fri May 22 20:59:01 2020 +0200 +++ b/util/sasl/plain.lua Fri May 22 21:05:45 2020 +0200 @@ -70,7 +70,7 @@ if self.profile.plain then local correct_password; correct_password, state = self.profile.plain(self, authentication, self.realm); - correct = (correct_password == password); + correct = (saslprep(correct_password) == password); elseif self.profile.plain_test then correct, state = self.profile.plain_test(self, authentication, password, self.realm); end