diff options
| author | Kim Alvefur <zash@zash.se> | 2020-05-23 14:17:04 +0200 |
|---|---|---|
| committer | Kim Alvefur <zash@zash.se> | 2020-05-23 14:17:04 +0200 |
| commit | a384654839f2d6429f7e9b88bfe554a607867bb1 (patch) | |
| tree | a249dec1a21ea653597ecba2e941089a3f886369 /plugins/mod_auth_insecure.lua | |
| parent | cca0d8ed2031f2f16d22976ce40db159a02e4d22 (diff) | |
| download | prosody-a384654839f2d6429f7e9b88bfe554a607867bb1.tar.gz prosody-a384654839f2d6429f7e9b88bfe554a607867bb1.zip | |
mod_auth_internal_*: Apply saslprep to passwords
Related to #1560
Diffstat (limited to 'plugins/mod_auth_insecure.lua')
| -rw-r--r-- | plugins/mod_auth_insecure.lua | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/plugins/mod_auth_insecure.lua b/plugins/mod_auth_insecure.lua index 9e23c29f..dc5ee616 100644 --- a/plugins/mod_auth_insecure.lua +++ b/plugins/mod_auth_insecure.lua @@ -9,6 +9,7 @@ local datamanager = require "util.datamanager"; local new_sasl = require "util.sasl".new; +local saslprep = require "util.encodings".stringprep.saslprep; local host = module.host; local provider = { name = "insecure" }; @@ -21,6 +22,10 @@ end function provider.set_password(username, password) local account = datamanager.load(username, host, "accounts"); + password = saslprep(password); + if not password then + return nil, "Password fails SASLprep."; + end if account then account.password = password; return datamanager.store(username, host, "accounts", account); |