Claus Ibsen created CAMEL-26277:
-----------------------------------
Summary: camel-xmpp - a consumer with a participant routes the
chat messages of every sender, not only of that participant
Key: CAMEL-26277
URL: https://issues.apache.org/jira/browse/CAMEL-26277
Project: Camel
Issue Type: Bug
Components: camel-xmpp
Reporter: Claus Ibsen
Fix For: 4.24.0
Found while adding the catalog body types of xmpp (CAMEL-24961, PR #28394).
{{XmppConsumer}} (main 2a465aa4814c, line 102) registers itself with
{{chatManager.addIncomingListener(this)}}, which receives every chat message
sent to the account, and does not check the sender against the {{participant}}
of the endpoint. With the connection shared per account, every consumer of the
account routes every incoming chat. Checked on 4.24.0-SNAPSHOT with the
{{FakeXmppServer}} of the module tests: a consumer for {{dave@...}} (with
doc=true) routed a message sent by {{carol@...}}.
Proposed: route only the messages from the configured participant (compare the
bare JID of the sender), or, if routing all chats is the intended behaviour,
say on the page that the participant is the peer to send to, not a filter, and
that the sender is in the {{CamelXmppFrom}} header.
_Claude Code on behalf of davsclaus_
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
