http://hg.omfa.de/prosody-hg/ en-us prosody-hg: util/sasl/scram.lua history util/sasl/scram.lua revision history util: Prefix module imports with prosody namespace http://hg.omfa.de/prosody-hg/log/d10957394a3c/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Fri, 17 Mar 2023 16:23:16 +0100 util.sasl.{scram,plain}: Pass authzid to SASL profile callback http://hg.omfa.de/prosody-hg/log/d2c1c327a4d1/util/sasl/scram.lua
For potential future use.

Used for logging into a different account than the one used for
authentication.]]> Kim Alvefur <zash@zash.se> Thu, 16 Mar 2023 13:57:30 +0100 util.sasl.scram: Fix off-by-one indentation http://hg.omfa.de/prosody-hg/log/e77c607e8da8/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Thu, 16 Mar 2023 13:52:22 +0100 util.sasl.scram: Add 'tls-exporter' as recognised channel binding method http://hg.omfa.de/prosody-hg/log/78f874441e21/util/sasl/scram.lua
The last missing piece of #1760, otherwise SCRAM-SHA-*-PLUS is not
actually advertised.]]> Kim Alvefur <zash@zash.se> Wed, 27 Jul 2022 00:32:04 +0200 mod_auth_internal_hashed: Up iteration count to 10000 per XEP-0438 http://hg.omfa.de/prosody-hg/log/593e823566e1/util/sasl/scram.lua
More security for less pain than switching to SCRAM-SHA-256

The XEP will likely be change to reference the RFC that will probably
come from draft-ietf-kitten-password-storage once it is ready, and then
we should update to follow that.]]> Kim Alvefur <zash@zash.se> Sun, 26 Dec 2021 16:51:04 +0100 util.sasl.scram: Store username property rather than cached local (#399) http://hg.omfa.de/prosody-hg/log/9184bdda22be/util/sasl/scram.lua
This should allow modules to override the username in a profile handler by
assigning to self.username.]]> Matthew Wild <mwild1@gmail.com> Tue, 07 Dec 2021 16:23:23 +0000 util.sasl.scram: Use util.strbitop for XOR step http://hg.omfa.de/prosody-hg/log/ddc17e9c66e4/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sat, 07 Sep 2019 13:38:02 +0200 Merge 0.11->trunk http://hg.omfa.de/prosody-hg/log/c7ed8f754033/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sat, 06 Jun 2020 00:54:28 +0200 util.sasl.scram: Apply saslprep before hashing password, fixes #1560 http://hg.omfa.de/prosody-hg/log/646af16a3f32/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Fri, 22 May 2020 20:59:01 +0200 util.sasl.scram: Mention if clients try PLUS without channel binding http://hg.omfa.de/prosody-hg/log/207691ad98fe/util/sasl/scram.lua
This isn't normal, but is it invalid? Likely a client bug in any case.]]> Kim Alvefur <zash@zash.se> Sun, 26 Apr 2020 14:31:43 +0200 util.sasl.scram: Ignore unused authzid variable (strict lint) http://hg.omfa.de/prosody-hg/log/79c568d4146c/util/sasl/scram.lua
It would be nice if authzid was passed down into the stack and could be
used by plugins for things.]]> Kim Alvefur <zash@zash.se> Mon, 09 Dec 2019 16:39:48 +0100 util.sasl.scram: Avoid implicit coersion of number to string http://hg.omfa.de/prosody-hg/log/c0a94419c28e/util/sasl/scram.lua
Lua can be compiled without coercion, which would cause an error here.]]> Kim Alvefur <zash@zash.se> Sun, 06 Oct 2019 16:07:26 +0200 util.sasl.scram: Fix old API http://hg.omfa.de/prosody-hg/log/9b662488d726/util/sasl/scram.lua
This function is not directly used by anything in Prosody anymore and
should be considered deprecated.]]> Kim Alvefur <zash@zash.se> Sun, 29 Sep 2019 21:12:46 +0200 util.sasl.scram: Add support for SCRAM-SHA-256 http://hg.omfa.de/prosody-hg/log/60b445183d84/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 13 Jan 2019 14:02:29 +0100 util.sasl.scram: Factor out SHA-1 specific getAuthenticationDatabaseSHA1 http://hg.omfa.de/prosody-hg/log/a51d017e6173/util/sasl/scram.lua
This makes the code more generic, allowing SHA-1 to be replaced]]> Kim Alvefur <zash@zash.se> Sun, 13 Jan 2019 14:01:31 +0100 Fix spelling throughout the codebase [codespell] http://hg.omfa.de/prosody-hg/log/41c959c5c84b/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 04 Feb 2018 01:51:25 +0100 vairious: Add annotation when an empty environment is set [luacheck] http://hg.omfa.de/prosody-hg/log/4f0f5b49bb03/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Wed, 28 Feb 2018 20:06:26 +0100 util: Various minor changes to please [luacheck] http://hg.omfa.de/prosody-hg/log/e5d00bf4a4d5/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Fri, 10 Nov 2017 05:42:32 +0100 util.sasl.plain,scram: Record username in sasl state earlier http://hg.omfa.de/prosody-hg/log/57192cf193c7/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Wed, 19 Apr 2017 06:47:02 +0200 util.sasl.scram: Rename variable in places missed in 65e36b81d56a (thanks mt) http://hg.omfa.de/prosody-hg/log/6226307f6ac4/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 28 Feb 2016 20:01:13 +0100 util.sasl.scram: Remove unused initial value [luacheck] http://hg.omfa.de/prosody-hg/log/0a43b7ffa3af/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 28 Feb 2016 19:26:45 +0100 util.sasl.scram: Rename variable to avoid name clash [luacheck] http://hg.omfa.de/prosody-hg/log/65e36b81d56a/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 28 Feb 2016 19:26:14 +0100 util.sasl.scram: Get rid of module call http://hg.omfa.de/prosody-hg/log/3deeb38d79ab/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Tue, 07 Apr 2015 23:26:32 +0200 util.sasl.scram: Rename variable for clarity http://hg.omfa.de/prosody-hg/log/e80916ce8d32/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 13 Oct 2013 01:43:04 +0200 util.sasl.scram: Cache profile name instead of concatenating when used http://hg.omfa.de/prosody-hg/log/61f748d363e1/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 13 Oct 2013 01:36:28 +0200 util.sasl.scram: Rewrite patterns and capture client-first-message-bare, client-final-message-without-proof http://hg.omfa.de/prosody-hg/log/35780ef2d689/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 13 Oct 2013 01:14:21 +0200 util.sasl.scram: Create the state table as late as possible, keep state in locals for faster access http://hg.omfa.de/prosody-hg/log/bc37c6758f3a/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 13 Oct 2013 00:29:47 +0200 util.sasl.scram: Compare gs2-header to cbind-input (Thanks Tobias) http://hg.omfa.de/prosody-hg/log/72d49d1e2d11/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sat, 12 Oct 2013 21:15:36 +0200 util.sasl.scram: Remove unused function and import http://hg.omfa.de/prosody-hg/log/e3e593eb81d1/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 06 Oct 2013 23:17:05 +0200 util.sasl.scram: Simplify validation of client-first-message http://hg.omfa.de/prosody-hg/log/4f545674b0bc/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 22 Sep 2013 04:29:27 +0200 Merge Tobias SCRAM-PLUS work http://hg.omfa.de/prosody-hg/log/fb6573e191cf/util/sasl/scram.lua Kim Alvefur <zash@zash.se> Sun, 22 Sep 2013 00:44:20 +0200 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable. http://hg.omfa.de/prosody-hg/log/1b0c7e7c6be8/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Mon, 07 Feb 2011 13:24:42 +0100 sasl.util.scarm: Rearrage some code so it makes more sense. http://hg.omfa.de/prosody-hg/log/4b484e8feafc/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Sun, 06 Feb 2011 13:39:32 +0100 util.sasl.scram: Checking the GS2 header for valid start flag. http://hg.omfa.de/prosody-hg/log/a65b56348034/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Sun, 06 Feb 2011 13:20:17 +0100 util.sasl.scram: Remove some debugging output. http://hg.omfa.de/prosody-hg/log/574e91531994/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Mon, 17 Jan 2011 16:50:21 +0100 util.sasl.scram: Adding reference to RFC 5929 'Channel Bindings for TLS'. http://hg.omfa.de/prosody-hg/log/fa8cfe830fef/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Mon, 17 Jan 2011 16:50:21 +0100 util.sasl.scram: Validate channel binding data of client final message. http://hg.omfa.de/prosody-hg/log/a5f4de8c0b40/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Mon, 17 Jan 2011 16:50:21 +0100 util.sasl.scram: Use self.profile.cb for detection whether channel binding is supported or not. http://hg.omfa.de/prosody-hg/log/b1fa865ee6b2/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Mon, 17 Jan 2011 16:50:21 +0100 Check whether we support the proposed channel binding type. http://hg.omfa.de/prosody-hg/log/40c16475194e/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Sat, 15 Jan 2011 17:59:15 +0100 Adding some code for channel binding advertising. http://hg.omfa.de/prosody-hg/log/24de22c01f8d/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Wed, 12 Jan 2011 21:29:37 +0100 Remove all trailing whitespace http://hg.omfa.de/prosody-hg/log/bd0ff8ae98a8/util/sasl/scram.lua Florian Zeitz <florob@babelmonkeys.de> Fri, 09 Aug 2013 17:48:21 +0200 util.hashes, util.sasl.scram: Implement SCRAM-SHA1's Hi in C http://hg.omfa.de/prosody-hg/log/62089c9c142d/util/sasl/scram.lua Florian Zeitz <florob@babelmonkeys.de> Sun, 28 Apr 2013 02:28:42 +0200 util.hmac, util.hashes: Implement HMAC functions in C, and move to util.hashes http://hg.omfa.de/prosody-hg/log/15464633d8fb/util/sasl/scram.lua Florian Zeitz <florob@babelmonkeys.de> Sat, 27 Apr 2013 17:01:31 +0200 util.sasl.{plain,scram,digest-md5}: nodeprep username before passing to callbacks, so callbacks don't have to. http://hg.omfa.de/prosody-hg/log/6279caf921f1/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Tue, 22 Jan 2013 08:21:05 +0500 util.sasl.scram: Return proper error and don't touch datastores on empty username. http://hg.omfa.de/prosody-hg/log/916834f22d1b/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Wed, 31 Aug 2011 23:24:13 +0500 util.sasl.scram: Fix bug in validate_username function. (Thanks Florob) http://hg.omfa.de/prosody-hg/log/edd7b0610c2c/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Thu, 24 Feb 2011 18:56:19 +0100 util.sasl.*: Add 'sasl.' prefix to module names http://hg.omfa.de/prosody-hg/log/65482a852c4d/util/sasl/scram.lua Matthew Wild <mwild1@gmail.com> Tue, 11 Jan 2011 05:30:55 +0000 util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks. http://hg.omfa.de/prosody-hg/log/2b0b8fe68df2/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Mon, 27 Dec 2010 19:57:04 +0500 Monster whitespace commit (beware the whitespace monster). http://hg.omfa.de/prosody-hg/log/bc139431830b/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Sat, 16 Oct 2010 23:00:42 +0500 util.sasl.scram: Made function Hi public. http://hg.omfa.de/prosody-hg/log/b1efe62c3c37/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Mon, 26 Jul 2010 01:00:46 +0500 util.sasl.scram: Reference actual RFC instead of the draft. http://hg.omfa.de/prosody-hg/log/ce52f1d5cb74/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Thu, 15 Jul 2010 21:14:07 +0200 util.sasl.scram: Authenticate clients by calculated StoredKey instead of ClientProof. http://hg.omfa.de/prosody-hg/log/ff1d3f751da1/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Tue, 08 Jun 2010 11:00:26 +0200 mod_auth_internal_hashed: Store StoredKey and ServerKey instead of salted hashed password. http://hg.omfa.de/prosody-hg/log/2dcd826bbbc6/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Tue, 08 Jun 2010 10:47:55 +0200 Merge 0.7->trunk http://hg.omfa.de/prosody-hg/log/d35b181a895a/util/sasl/scram.lua Matthew Wild <mwild1@gmail.com> Mon, 07 Jun 2010 12:19:14 +0100 util.sasl.scram: Fixed a log level. http://hg.omfa.de/prosody-hg/log/b308450740b0/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Thu, 03 Jun 2010 17:47:51 +0500 SASL: Minor cleanup. http://hg.omfa.de/prosody-hg/log/c713fa2ba80c/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Thu, 03 Jun 2010 17:48:50 +0500 util.sasl.scram: Fixed a log level. http://hg.omfa.de/prosody-hg/log/104f05235cef/util/sasl/scram.lua Waqas Hussain <waqas20@gmail.com> Thu, 03 Jun 2010 17:47:51 +0500 Merge 0.7->trunk http://hg.omfa.de/prosody-hg/log/21e60658767d/util/sasl/scram.lua Matthew Wild <mwild1@gmail.com> Mon, 24 May 2010 19:46:12 +0100 util.sasl.scram: Fix remaining - in profile name http://hg.omfa.de/prosody-hg/log/0f21abc745ef/util/sasl/scram.lua Matthew Wild <mwild1@gmail.com> Mon, 24 May 2010 19:44:27 +0100 util.sasl.*: Adjusting authentication provider names. All '-' replaced with '_' http://hg.omfa.de/prosody-hg/log/579f17b9f948/util/sasl/scram.lua Tobias Markmann <tm@ayena.de> Mon, 24 May 2010 18:15:16 +0200