Support checking auth-source for NickServ password for rcirc

* doc/misc/rcirc.texi: Mention new feature.
* etc/NEWS: Mention new feature.
* lisp/net/rcirc.el (rcirc-authinfo): Update type and documentation.
(rcirc-authenticate): Handle a special type to indicate that the
password is stored via auth-source.

doc/misc/rcirc.texi

@@ -595,6 +595,10 @@ Before you can use this method, you will have to register your nick and
 pick a password for it.  Contact @code{nickserv} and check out the
 details.  (Using @code{/msg nickserv help}, for example.)
 
+You can set the password to the symbol @code{:auth-source}, to fetch the
+password from auth-source (@pxref{auth-source}), if you to not hard-code
+your password in your configuration.
+
 @item chanserv
 @cindex chanserv authentication
 Use this symbol if you need to identify yourself as follows if you want

etc/NEWS

@@ -1891,6 +1891,13 @@ the command will only copy those files.
 +++
 *** package-x.el is now obsolete.
 
+
+** RCIRC
+
++++
+*** Authentication via NickServ can access password from 'auth-source'
+For details, consult 'rcirc-authinfo'.
+
 ** Xref
 
 ---

lisp/net/rcirc.el

@@ -270,8 +270,13 @@ The ARGUMENTS for each METHOD symbol are:
   `sasl': NICK PASSWORD
   `certfp': KEY CERT
 
+For `nickserv', PASSWORD may be the symbol `:auth-source', in which case
+the host, nick and port will be used to query a password from an
+available `auth-source' backend.
+
 Examples:
  ((\"Libera.Chat\" nickserv \"bob\" \"p455w0rd\")
+  (\"Libera.Chat\" nickserv \"bob\" :auth-source)
   (\"Libera.Chat\" chanserv \"bob\" \"#bobland\" \"passwd99\")
   (\"Libera.Chat\" certfp \"/path/to/key\" \"/path/to/cert\")
   (\"bitlbee\" bitlbee \"robert\" \"sekrit\")
@@ -282,7 +287,9 @@ Examples:
                 :value-type (choice (list :tag "NickServ"
                                           (const nickserv)
                                           (string :tag "Nick")
-                                          (string :tag "Password"))
+                                          (choice
+                                           (string :tag "Password")
+                                           (const :tag "Use Auth-Source" :auth-source)))
                                     (list :tag "ChanServ"
                                           (const chanserv)
                                           (string :tag "Nick")
@@ -3666,40 +3673,44 @@ specified in RFC2812, where 005 stood for RPL_BOUNCE."
 Passwords are stored in `rcirc-authinfo' (which see)."
   (interactive)
   (with-rcirc-server-buffer
-    (dolist (i rcirc-authinfo)
+    (pcase-dolist (`(,(rx (regexp rcirc-server)) . ,ai) rcirc-authinfo)
-      (let ((process (rcirc-buffer-process))
+      (pcase ai
-            (server (car i))
+        (`(nickserv ,(rx (regexp rcirc-nick)) :auth-source . ,(or `(,nickserv) '()))
-            (nick (nth 2 i))
+         (if-let* ((auth (auth-source-search
-            (method (cadr i))
+                          :host rcirc-server
-            (args (cdddr i)))
+                          :port (nth 1 rcirc-connection-info)
-        (when (and (string-match server rcirc-server))
+                          :user (nth 2 rcirc-connection-info)))
-          (if (and (memq method '(nickserv chanserv bitlbee))
+                   (password (auth-info-password (car auth))))
-                   (string-match nick rcirc-nick))
-              ;; the following methods rely on the user's nickname.
-              (cl-case method
-                (nickserv
              (rcirc-send-privmsg
-                  process
+              (rcirc-buffer-process)
-                  (or (cadr args) "NickServ")
+              (or nickserv "NickServ")
-                  (concat "IDENTIFY " (car args))))
+              (concat "IDENTIFY " password))
-                (chanserv
+           (rcirc-print
+            (rcirc-buffer-process) rcirc-nick "ERROR" nil
+            "No auth-source entry found for `nickserv' authentication")))
+        (`(nickserv ,(rx (regexp rcirc-nick)) ,password . ,(or `(,nickserv) '()))
          (rcirc-send-privmsg
-                  process
+          (rcirc-buffer-process)
+          (or nickserv "NickServ")
+          (concat "IDENTIFY " password)))
+        (`(chanserv ,(rx (regexp rcirc-nick)) ,channel ,password)
+         (rcirc-send-privmsg
+          (rcirc-buffer-process)
           "ChanServ"
-                  (format "IDENTIFY %s %s" (car args) (cadr args))))
+          (format "IDENTIFY %s %s" channel password)))
-                (bitlbee
+        (`(bitlbee ,(rx (regexp rcirc-nick)) ,password)
          (rcirc-send-privmsg
-                  process
+          (rcirc-buffer-process)
           "&bitlbee"
-                  (concat "IDENTIFY " (car args))))
+          (concat "IDENTIFY " password)))
-                (sasl nil))
+        (`(quakenet ,account ,password)
-            ;; quakenet authentication doesn't rely on the user's nickname.
+         ;; quakenet authentication doesn't rely on the user's
-            ;; the variable `nick' here represents the Q account name.
+         ;; nickname.  the variable `account' here represents the Q
-            (when (eq method 'quakenet)
+         ;; account name.
          (rcirc-send-privmsg
-               process
+          (rcirc-buffer-process)
           "Q@CServe.quakenet.org"
-               (format "AUTH %s %s" nick (car args))))))))))
+          (format "AUTH %s %s" account password)))))))
 
 (defun rcirc-handler-INVITE (process sender args _text)
   "Notify user of an invitation from SENDER.