Skip to content

Fix SCRAM implementation to adhere spec#60

Merged
elprans merged 1 commit intomasterfrom
fix_scram
Dec 29, 2019
Merged

Fix SCRAM implementation to adhere spec#60
elprans merged 1 commit intomasterfrom
fix_scram

Conversation

@tailhook
Copy link
Contributor

@tailhook tailhook commented Dec 27, 2019

By specification nonce is not base64 encoded string. Quoting the
spec:

r: This attribute specifies a sequence of random printable ASCII
characters excluding ',' (which forms the nonce used as input to
the hash function). No quoting is applied to this string.

I mean current edgedb doesn't accept anything other than valid
base64-encoded string including padding, which is wrong. (The generation
of nonce using base64 as well as client implementation are fine).

Unfortunately this requires a tiny patch in the edgedb itself (so tests are broken now).

tailhook added a commit to geldata/gel that referenced this pull request Dec 27, 2019
By specification `nonce` is not base64 encoded string. Quoting the
spec:

>  o  r: This attribute specifies a sequence of random printable ASCII
>     characters excluding ',' (which forms the nonce used as input to
>     the hash function).  No quoting is applied to this string.

I mean current edgedb doesn't accept anything other than valid
base64-encoded string including padding, which is wrong. (The generation
of nonce using base64 as well as client implementation are fine).
@elprans elprans merged commit 9935129 into master Dec 29, 2019
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
@elprans elprans mentioned this pull request Dec 30, 2019
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
@1st1 1st1 deleted the fix_scram branch December 30, 2019 20:40
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)
1st1 pushed a commit to geldata/gel that referenced this pull request Dec 30, 2019
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)

* Update SASL-related protocol messages
  (by @tailhook in cc95d8d)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)

* Update SASL-related protocol messages
  (by @tailhook in cc95d8d)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)

* Update SASL-related protocol messages
  (by @tailhook in cc95d8d)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)

* Update SASL-related protocol messages
  (by @tailhook in cc95d8d)
elprans added a commit that referenced this pull request Dec 30, 2019
Fixes
=====

* Fix SCRAM implementation to adhere to the spec
  (by @tailhook in 9935129 for #60)

* Update SASL-related protocol messages
  (by @tailhook in cc95d8d)

* Set protocol version to 0.7
  (by @1st1 in 919a4c7)
@Neustradamus

This comment was marked as off-topic.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants