end
end
-local function password_callback(node, host, mechanism)
+local function password_callback(node, host, mechanism, raw_host)
local password = (datamanager.load(node, host, "accounts") or {}).password; -- FIXME handle hashed passwords
local func = function(x) return x; end;
if password then
if mechanism == "PLAIN" then
return func, password;
elseif mechanism == "DIGEST-MD5" then
- return func, md5(node..":"..host..":"..password);
+ return func, md5(node..":"..raw_host..":"..password);
end
end
return func, nil;
if not response["qop"] then response["qop"] = "auth" end
if response["realm"] == nil then response["realm"] = "" end
+ local raw_realm = response["realm"];
if response["charset"] == nil then
response["username"] = latin1toutf8(response["username"])
--TODO maybe realm support
self.username = response["username"]
- local password_encoding, Y = self.password_handler(response["username"], response["realm"], "DIGEST-MD5")
+ local password_encoding, Y = self.password_handler(response["username"], response["realm"], "DIGEST-MD5", raw_realm)
if Y == nil then return "failure", "not-authorized"
elseif Y == false then return "failure", "account-disabled" end