Remove SCRAM-related variables on IRCServer object when we see

server-final-message (sasl.py)

1 files changed, 4 insertions, 0 deletions

diff --git a/modules/sasl.py b/modules/sasl.py
index 362a5b0d..ed4faabf 100644
--- a/modules/sasl.py
+++ b/modules/sasl.py
@@ -114,6 +114,10 @@ class Module(ModuleManager.BaseModule):
                     server_signature = hmac.digest(server_key, auth_message,
                         algo)
 
+                    del event["server"]._scram_first
+                    del event["server"]._scram_salted_password
+                    del event["server"]._scram_auth_message
+
                     if server_signature != base64.b64decode(verifier):
                         raise ValueError("SCRAM %s authentication failed "
                             % algo)