WAMPCRA Password Salting

crossbario / autobahn-java

WebSocket & WAMP in Java for Android and Java 8

https://crossbar.io/autobahn

MIT License

1.52k stars 426 forks source link

WAMPCRA Password Salting #511

Closed entone closed 4 years ago

entone commented 4 years ago

It appears that password salting is not supported for the WAMPCRA authmethod.

Am I missing something?

om26er commented 4 years ago

That is true. But just looked at the code (again), I think it should be pretty straightforward to implement that. I might be able to implement that this week.

entone commented 4 years ago

That would be fantastic! Let me know if you need any support/testing whatever.

om26er commented 4 years ago

I have a work in progress pull request here https://github.com/crossbario/autobahn-java/pull/512 -- it is successfully able to derive the correct key (verified), however the signed challenge that we return gets rejected by Crossbar.