supabase / supavisor / 36774170337

81%

Build Type

push

github

Committed by web-flow

Commit Message

fix: decode password messages according to the requested auth type (#1211)

PasswordMessage, SASLInitialResponse and SASLResponse share the 'p' tag,
and their contents can only be interpreted knowing which one was
requested. Server.decode_pkt/1 guessed from the contents, so a cleartext
password starting with "md5" was decoded as an MD5 digest and rejected.

Add Server.decode_password_message/2, which takes the expected message
type, and use it in the password, JIT and SCRAM auth methods.

Coverage Stats

26 of 26 new or added lines in 4 files covered. (100.0%)

3 existing lines in 3 files now uncovered.

3055 of 3783 relevant lines covered (80.76%)

49901.25 hits per line