SASL_AUTHORIZE_T(3)

💖 sasl_authorize_t(3) — Cyrus SASL, bestie edition 💖

okay so real talk, this one lives in the Cyrus SASL manual, section 3, and it's literally the bouncer-at-the-club of the SASL world. let's get into it 🫶

---

✨ NAME ✨

sasl_authorize_t — Cyrus SASL documentation 📖

---

🌸 SYNOPSIS 🌸

#include <sasl/sasl.h>

int sasl_authorize_t(void *context,
                    const char *requested_user, unsigned alen,
                    const char *auth_identity, unsigned alen,
                    const char *def_realm, unsigned urlen,
                    struct propctx *propctx)

like yes, alen shows up twice, that's just how it is, we don't question the ancestors 💅

---

🦋 DESCRIPTION 🦋

so sasl_authorize_t is the callback that answers the question: is this allowed?? specifically, it checks whether the authorized user auth_identity is actually permitted to act as the user requested_user. it's giving "who do you think you are" but make it polite ✨

the classic example, and it's a good one: the user root might wanna authenticate with his own credentials but then act as the user mmercer — and when that happens, it's with all of mmercer's rights, not root's. big difference, no cap. 👑

⚠️ a server application should be very careful here, and should probably err on the side of caution when deciding which users are allowed to proxy as which other users. this is not the place to be chill and generous. this is the place to be a little paranoid, bestie. 🙈

---

💜 RETURN VALUE 💜

SASL callback functions should return SASL return codes — peek at sasl.h for the full list, it's all in there. and SASL_OK means success. that's the one you want. 🎀

---

🌈 SEE ALSO 🌈

• sasl(3)
• sasl_callbacks(3)

---

👑 AUTHOR 👑

The Cyrus Team — icons only, we stan 💅

---

📜 COPYRIGHT 📜

1993-2016, The Cyrus Team

---

and that's the whole page, you ate it, you understood it, go forth and authorize responsibly 🧚✨

this little deep-dive comes from Cyrus SASL 2.1.28, dated February 18, 2022 — mwah, sending you the manual page equivalent of a forehead kiss 💖🌸🫶