# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1261432849 0
# Node ID 4768879d3591f8309075a920a3ce9d36652dc6d5
# Parent  92264ee3a0e450d4e8222a12c5865a8f0ce0f71d
mod_saslauth: Requiring c2s encryption means requiring c2s encryption... thanks Flo

diff -r 92264ee3a0e4 -r 4768879d3591 plugins/mod_saslauth.lua
--- a/plugins/mod_saslauth.lua	Mon Dec 21 17:03:47 2009 +0000
+++ b/plugins/mod_saslauth.lua	Mon Dec 21 22:00:49 2009 +0000
@@ -104,6 +104,9 @@
 		if not valid_mechanism then
 			return session.send(build_reply("failure", "invalid-mechanism"));
 		end
+		if secure_auth_only and not session.secure then
+			return session.send(build_reply("failure", "encryption-required"));
+		end
 	elseif not session.sasl_handler then
 		return; -- FIXME ignoring out of order stanzas because ejabberd does
 	end