# HG changeset patch # User Kim Alvefur # Date 1687514989 -7200 # Node ID 50d0bd035bb7e359f7246e5d1bbad74f11c7c83a # Parent eb86e37519783e3ef0591e04b44df8aa4020114d util.sasl.oauthbearer: Don't send authzid It's not needed and not recommended in XMPP unless we want to act as someone other than who we authenticate as. We find out the JID during resource binding. diff -r eb86e3751978 -r 50d0bd035bb7 util/sasl/oauthbearer.lua --- a/util/sasl/oauthbearer.lua Fri Jun 23 10:12:38 2023 +0200 +++ b/util/sasl/oauthbearer.lua Fri Jun 23 12:09:49 2023 +0200 @@ -1,9 +1,9 @@ return function (stream, name) - if name == "OAUTHBEARER" and stream.username then + if name == "OAUTHBEARER" then return function (stream) local auth = stream.bearer_token and ("Bearer "..stream.bearer_token) or ""; - local message, data = coroutine.yield("n,a="..stream.username.."@"..stream.host..",\001auth="..auth.."\001\001"); + local message, data = coroutine.yield("n,,\001auth="..auth.."\001\001"); if message == "success" then return true; elseif message == "challenge" then