Projects tigase _server server-core Issues #1116
account_status is not checked (#1116)
Closed
wojciech.kapcia@tigase.net opened 5 years ago

Currently not verified accounts (account_status = -2) are allowed to login (newly registered account without clicking in link in confirmation email):

<!--   2020-02-07T15:04:43Z   <<<<   -->
<features xmlns='http://etherx.jabber.org/streams'>
<sm xmlns='urn:xmpp:sm:3'/>
<pipelining xmlns='urn:xmpp:features:pipelining'/>
<auth xmlns='http://jabber.org/features/iq-auth'/>
<register xmlns='http://jabber.org/features/iq-register'/>
<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
<mechanism>SCRAM-SHA-256</mechanism>
<mechanism>SCRAM-SHA-1</mechanism>
<mechanism>PLAIN</mechanism>
</mechanisms>
<ver xmlns='urn:xmpp:features:rosterver'/>
<sub xmlns='urn:xmpp:features:pre-approval'/>
<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
</features>

<!--   2020-02-07T15:04:43Z   >>>>   -->
<auth xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='SCRAM-SHA-256'>biwsbj13b2p0ZWt0ZXN0YWNjLHI9QlNEQkhCTUxOQ01GQ0xPR0lPTUc=</auth>

<!--   2020-02-07T15:04:43Z   <<<<   -->
<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>cj1CU0RCSEJNTE5DTUZDTE9HSU9NR2ZIbThKanlJT1Bwb24xTEs2eFJsLHM9RjFscVg1QlNZd3REc2c9PSxpPTQwOTY=</challenge>

<!--   2020-02-07T15:04:43Z   >>>>   -->
<response xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>Yz1iaXdzLHI9QlNEQkhCTUxOQ01GQ0xPR0lPTUdmSG04Smp5SU9QcG9uMUxLNnhSbCxwPWVXQmtYSDU5bVdDWEFEZWRFaFBLMFhWU0lYQTVRemxwaC9PVVh3RFJTQVk9</response>

<!--   2020-02-07T15:04:44Z   <<<<   -->
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>dj16SHRjS1o1NzVTTmhoU0xnRWMwYW9vR28raWtPN0JPSXlYeiszRXRocGlBPQ==</success>

<!--   2020-02-07T15:04:44Z   >>>>   -->
<stream:stream to='sure.im' from='wojtektestacc@sure.im' version='1.0' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams'>

<!--   2020-02-07T15:04:44Z   <<<<   -->
<stream:streamfrom='sure.im' id='5cb2feb2-4982-4443-9b36-13c00b7830ad' stream='http://etherx.jabber.org/streams' xml:lang='en' version='1.0' ='jabber:client'>

  • fix checking
  • add TTS-NG test
issue 1 of 1
Type
Bug
Priority
Normal
Assignee
Version
tigase-server-8.1.0
Spent time
7h 15m
Issue Votes (0)
Watchers (0)
Reference
tigase/_server/server-core#1116
Please wait...
Page is in error, reload to recover