# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1756977286 -3600
# Node ID 04c3273cb81fffe59b8f5b717f6eb9e1fc860162
# Parent  07808fcda0e44e921f3bf4d22e833b8b931e5a32
mod_auth_cyrus: Add empty 'profile' table to SASL handler objects

This is for compatibility with Prosody's built-in util.sasl objects.

A SASL profile table usually includes methods supported by the backend, which
can be used by SASL mechanism handlers to perform operations (such as testing
the password). It also optionally contains a 'cb' field with channel binding
method handlers.

The Cyrus backend doesn't support channel binding, and doesn't have the same
concept of auth backend methods (it handles all that internally, and Prosody
has no insight or control over it).

Thus, we create an empty profile which informs Prosody that the SASL handler
does not support any of the auth or channel binding methods. Some features
will not work, but they didn't work anyway. This just makes it explicit.

This fixes a traceback in mod_sasl2_fast, which expected SASL handlers to
always contain a 'profile' field.

diff -r 07808fcda0e4 -r 04c3273cb81f mod_auth_cyrus/sasl_cyrus.lua
--- a/mod_auth_cyrus/sasl_cyrus.lua	Tue Sep 02 22:19:51 2025 +0200
+++ b/mod_auth_cyrus/sasl_cyrus.lua	Thu Sep 04 10:14:46 2025 +0100
@@ -111,6 +111,7 @@
 		mechanisms[w] = true;
 	end
 	sasl_i.mechs = mechanisms;
+	sasl_i.profile = {};
 	return setmetatable(sasl_i, method);
 end