mod_storage_sql: Removed unnecessary initialization of a variable.

[prosody.git] / plugins / mod_legacyauth.lua

diff --git a/plugins/mod_legacyauth.lua b/plugins/mod_legacyauth.lua
index 95f361104383fcedf28059663096c9b807082488..47a8c0abb007edc8dc74f64702172b4583e8e502 100644 (file)
--- a/plugins/mod_legacyauth.lua
+++ b/plugins/mod_legacyauth.lua
@@ -32,6 +32,11 @@ end);
 module:hook("stanza/iq/jabber:iq:auth:query", function(event)
        local session, stanza = event.origin, event.stanza;
 
+       if session.type ~= "c2s_unauthed" then
+               session.send(st.error_reply(stanza, "cancel", "service-unavailable", "Legacy authentication is only allowed for unauthenticated client connections."));
+               return true;
+       end
+
        if secure_auth_only and not session.secure then
                session.send(st.error_reply(stanza, "modify", "not-acceptable", "Encryption (SSL or TLS) is required to connect to this server"));
                return true;