SASL : SCRAM-SHA-1

This module is a JavaScript implementation of the SCRAM-SHA-1 SASL mechanism, which plugs into the SASL framework.

July 2024: This repository is a continuation of the development of the library, which was archived by the original developer. Many thanks to Lance for the library and for helping with the transition.

Installing

$ npm install sasl-scram-sha-1

Usage

Register the SCRAM-SHA-1 mechanism.

factory.use(require('sasl-scram-sha-1'));

Send an authentication response with necessary credentials.

var mech = factory.create(['SCRAM-SHA-1']);
var initial = mech.response({username: 'chris', password: 'secret'});

var secondResp = mech.challenge('r="XCV234BAL90",s="XMXC234DFS",i=4096')
                     .response({username: 'chris', password: 'secret'});

TODO

Currently missing features:

• Mutual authentication of the server based on the success message.

Credits

• Lance Stout
• Jared Hanson
• Stephen Paul Weber

License

The MIT License

Copyright (c) 2013 Lance Stout <http://github.com/legasteros/> Copyright (c) 2012 Jared Hanson <http://jaredhanson.net/> Copyright (c) 2024 Stephen Paul Weber <https://singpolyma.net/>