dagolden / Authen-SCRAM

Salted Challenge Response Authentication Mechanism (RFC 5802)
https://metacpan.org/author/DAGOLDEN
1 stars 0 forks source link

Implement computed credential caching #2

Closed xdg closed 6 years ago

xdg commented 7 years ago

RFC-5802 says:

Note that a client implementation MAY cache ClientKey&ServerKey (or just SaltedPassword) for later reauthentication to the same service, as it is likely that the server is going to advertise the same salt value upon reauthentication.

Authen::Scram should cache the salt, iteration count and salted password and reuse the salted password if the salt and iteration count are unchanged.