2
0
Эх сурвалжийг харах

[Port from 2.0] Fixed authentication issue for non-REGISTER requests
Thanks to Stefan Sayer for this out!

Nils Ohlmeier 17 жил өмнө
parent
commit
695adc6908
1 өөрчлөгдсөн 2 нэмэгдсэн , 3 устгасан
  1. 2 3
      etc/ser-oob.cfg

+ 2 - 3
etc/ser-oob.cfg

@@ -885,11 +885,10 @@ route[AUTHENTICATION]
 	}
 
 	# check if the UID from the authentication matches the From header
-	$authuid = $uid;
-	if (!lookup_user("$fu.uid", "@from.uri")) {
+	if (!lookup_user("$fr.uid", "@from.uri")) {
 		del_attr("$uid");
 	}
-	if ($fu.uid != $fr.authuid) {
+	if ($fu.uid != $fr.uid) {
 		sl_reply("403", "Fake Identity");
 		drop;
 	}