Fail if username or password don't pass SASLprep.

[prosody.git] / util / sasl / scram.lua

diff --git a/util/sasl/scram.lua b/util/sasl/scram.lua
index 7d60ef866d48dcfb4a88044fa0f6295cb808d240..f7b8300accf91cd273d47894e55955d1a36c6fb0 100644 (file)
--- a/util/sasl/scram.lua
+++ b/util/sasl/scram.lua
@@ -22,7 +22,7 @@ local generate_uuid = require "util.uuid".generate;
 local saslprep = require "util.encodings".stringprep.saslprep;
 local log = require "util.logger".init("sasl");
 
-module "plain"
+module "scram"
 
 --=========================
 --SASL SCRAM-SHA-1 according to draft-ietf-sasl-scram-10
@@ -70,6 +70,8 @@ local function validate_username(username)
        end
        
        -- replace =2D with , and =3D with =
+       username:gsub("=2D", ",");
+       username:gsub("=3D", "=");
        
        -- apply SASLprep
        username = saslprep(username);