search

xmppo / node-xmpp-bosh

An XMPP BOSH & WebSocket server (connection manager) written on node.js using Javascript
https://github.com/xmppo/node-xmpp-bosh
263 stars 85 forks source link

SASL support for X-FACEBOOK-PLATFORM #37

Closed immanuel closed 12 years ago

immanuel commented 12 years ago

I have the BOSH server running on nodejitsu, with a strophe client. I am trying to authenticate a user for Facebook chat using the X-FACEBOOK-PLATFORM. I have also added 'chat.facebook.com' to the no-TLS list in the conf file.

But, when chat.facebook.com offers the choice between DIGEST-MD5 and X-FACEBOOK-PLATFORM, the app defaults to DIGEST-MD5.

Is this an issue with node-xmpp-bosh or nodejitsu? Is there a way to solve this?

I have tested the strophe client with PunJab and X-FACEBOOK-PLATFORM does work.

dhruvbird commented 12 years ago

Authentication is handled by the xmpp client, so most likely you need to get strophe to fix it.

I am unsure of how (or whether) facebook changes the auth mechanisms once SSL is enabled. It is possible that they use a weaker form of auth. once SSL is enabled since the connection is now encrypted. Do you know if Punjab supports SSL upgrades? Try to check if Punjab is also not upgrading the connection. As a first step, try to leave the no-TLS list in the config file empty.

dhruvbird commented 12 years ago

@immanuel Were you able to figure out where the issue is?

immanuel commented 12 years ago

Hi - it was an issue with nodejitsu. There was no support for https and hence DIGEST-MD5 was picked up by default.