Only allow cleartext when using an ssl connection

will · Dec 16, 2020 · fa59c75 · fa59c75
1 parent 20d13e0
commit fa59c75
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/pq/connection.cr b/src/pq/connection.cr
@@ -261,6 +261,7 @@ module PQ
       when Frame::Authentication::Type::OK
         # no op
       when Frame::Authentication::Type::CleartextPassword
+        raise "Cleartext auth over unencrypted connection is not supported" if !@soc.is_a?(OpenSSL::SSL::Socket::Client)
         handle_auth_cleartext auth_frame.body
       when Frame::Authentication::Type::SASL
         handle_auth_sasl auth_frame.body