X-Git-Url: https://git.enpas.org/?a=blobdiff_plain;f=util%2Fsasl.lua;h=9c8fff7804a28edd6b7e4e430b846d3d23093696;hb=d62e87560c3d31b20bd786513d210c9d15e293e2;hp=7b7db0247ae50efa6537002a65fb71ed30562a20;hpb=bed0134a220690656748a9f751183eb22528e95f;p=prosody.git

diff --git a/util/sasl.lua b/util/sasl.lua
index 7b7db024..9c8fff78 100644
--- a/util/sasl.lua
+++ b/util/sasl.lua
@@ -83,13 +83,19 @@ end
 
 -- create a new SASL object which can be used to authenticate clients
 function new(realm, profile, forbidden)
-	sasl_i = {profile = profile};
+	local sasl_i = {profile = profile};
 	sasl_i.realm = realm;
-	s = setmetatable(sasl_i, method);
-	s:forbidden(sasl_i, forbidden)
+	local s = setmetatable(sasl_i, method);
+	if forbidden == nil then forbidden = {} end
+	s:forbidden(forbidden)
 	return s;
 end
 
+-- get a fresh clone with the same realm, profiles and forbidden mechanisms
+function method:clean_clone()
+	return new(self.realm, self.profile, self:forbidden())
+end
+
 -- set the forbidden mechanisms
 function method:forbidden( restrict )
 	if restrict then
@@ -107,7 +113,7 @@ function method:mechanisms()
 	for backend, f in pairs(self.profile) do
 		if backend_mechanism[backend] then
 			for _, mechanism in ipairs(backend_mechanism[backend]) do
-				if not sasl_i.restrict:contains(mechanism) then
+				if not self.restrict:contains(mechanism) then
 					mechanisms[mechanism] = true;
 				end
 			end