Changeset 721 in code for trunk/downstream.go

Timestamp:

Nov 19, 2021, 5:55:07 PM (4 years ago)

Author:

contact

Message:

Abort SASL if in-progress while completing registration

Implements the following recommendation from the spec:

If the client completes registration (with CAP END, NICK, USER and any other
necessary messages) while the SASL authentication is still in progress, the
server SHOULD abort it and send a 906 numeric, then register the client
without authentication.

File:

• trunk/downstream.go (modified) (1 diff)

trunk/downstream.go

@@ -1111 +1111 @@
         }
 
+        if dc.saslServer != nil {
+                dc.saslServer = nil
+                dc.SendMessage(&irc.Message{
+                        Prefix:  dc.srv.prefix(),
+                        Command: irc.ERR_SASLABORTED,
+                        Params:  []string{"*", "SASL authentication aborted"},
+                })
+        }
+
         password := dc.password
         dc.password = ""