fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix self-review regressions: throttle SASL SCRAM, key game target by UID, exclude keycard from password lockout
Some checks failed
CI / check (push) Has been cancelled
Details

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-19 14:38:16 +00:00
parent 4599c4834d
commit c36341668c
No known key found for this signature in database
4 changed files with 28 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

6
api/src/lib.rs
View file

@ -243,8 +243,10 @@ pub enum AuthThen {
// NickServ IDENTIFY: `uid` logs in, `agent` (NickServ uid) sends the notices,
// `name` is what the user typed (for lockout/note_auth), `account` is canonical.
Identify { uid: String, agent: String, name: String, account: String },
// SASL PLAIN: finish the SASL exchange for `client`, sourced from `agent`.
Sasl { agent: String, client: String, account: String },
// SASL: finish the exchange for `client`, sourced from `agent`. `password` is
// whether this was a password verify (feeds the brute-force throttle) vs a
// one-time keycard redemption (which must not touch the password lockout).
Sasl { agent: String, client: String, account: String, password: bool },
}
/// The ircd link layer. The engine only ever sees [`NetEvent`] / [`NetAction`];