Fix SCRAM auth of uppercase passwords (EJAB-1196)

diff --git a/src/scram.erl b/src/scram.erl
index dc1490189f70535e883f196e04e78b40476071d4..860854ce1e72104dd46e7805fbbc2b34b317f67a 100644 (file)
--- a/src/scram.erl
+++ b/src/scram.erl
@@ -37,8 +37,9 @@
         client_key/2
        ]).
 
+%% ejabberd doesn't implement SASLPREP, so we use the similar RESOURCEPREP instead
 salted_password(Password, Salt, IterationCount) ->
-       hi(jlib:nameprep(Password), Salt, IterationCount).
+       hi(jlib:resourceprep(Password), Salt, IterationCount).
 
 client_key(SaltedPassword) ->
        crypto:sha_mac(SaltedPassword, "Client Key").