Return IQ auth error when sending data before being authenticated

Description

IQRouter has a bit of code that attempts to detect a non-SASL authentication attempt being performed at a server address different from the one that's used by Openfire. It will log to warn, and return a 'bad request' error.

The current detection is incomplete: it also triggers when a client sends any IQ request to a component.

As non-SASL authentication is deprecated and rarely used, and the implementation is incomplete, we'd better remove this bit, and instead use the catch-all statement that will return 'not-authorized'.

Environment

None

Activity

Show:
Fixed

Details

Assignee

Reporter

Components

Fix versions

Priority

Created May 18, 2021 at 2:02 PM
Updated June 11, 2021 at 1:41 PM
Resolved June 11, 2021 at 1:41 PM

Flag notifications