New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prose doesn't authenticate against servers implementing XEP-0474 (SASL SCRAM Downgrade Protection) #106

Closed

nesium opened this issue Jun 7, 2024 · 1 comment

Labels

bug

Contributor

nesium commented Jun 7, 2024

Moved from prose-im/prose-core-client#87 because prose-app-web uses the strophe.js dependency.

More on the subject of how it may affect other clients be read here: https://www.process-one.net/blog/ejabberd-24-02/#converse

In short, prose fails to authenticate against recent ejabberd or prosody server whenever disable_sasl_scram_downgrade_protection: true is set (ejabberd) or with https://modules.prosody.im/mod_sasl_ssdp.html (prosody).

I haven't had too deep of a look, but presumably this was fixed in this PR: strophe/strophejs#698?

valeriansaliou added the bug label

valeriansaliou closed this as completed in

097bd53

rom1dep commented Jun 9, 2024

That was quick! The fix works, thanks :) 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment