Response to scram failures with a generic not-authorized

esl · May 9, 2023 · 897d72b · 897d72b
1 parent 2cec977
commit 897d72b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/sasl/cyrsasl_scram.erl b/src/sasl/cyrsasl_scram.erl
@@ -60,7 +60,8 @@ mech_step(State, ClientIn) ->
             Creds1 = mongoose_credentials:extend(Creds0, R),
             {ok, Creds1};
         {error, Reason, _} ->
-            {error, Reason}
+            ?LOG_INFO(#{what => scram_authentication_failed, reason => Reason}),
+            {error, <<"not-authorized">>}
     end.
 
 -spec get_scram_attributes(mongooseim:host_type(), jid:jid(), sha()) -> scram_att() | error().