Keith Wall created PROTON-1518:
----------------------------------
Summary: Proton provides no mechanism to get or set the
additional-data field on sasl-outcome
Key: PROTON-1518
URL: https://issues.apache.org/jira/browse/PROTON-1518
Project: Qpid Proton
Issue Type: Bug
Components: proton-j
Affects Versions: proton-j-0.19.0
Reporter: Keith Wall
Assignee: Keith Wall
Fix For: proton-j-0.20.0
The Proton Engine API provides no mechanism for getting or setting the
additional-data field on sasl-outcome.
Some SASL mechanisms (e.g. SCRAM-SHA-\*) send additional data along with the
outcome (in the case of SCRAM-SHA-\* the additional data is a proof that the
server is also aware of the credentials and is not simply just accepting any
credential data as part of some sort of attack).
One approach for the API would be to expose the additional-data field using the
send/recv/pending methods used for exchanging the challenge/response in the
earlier phases of the sasl exchange.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
