xabber-web icon indicating copy to clipboard operation
xabber-web copied to clipboard

Suppport for XEP-0070: Verifying HTTP Requests via XMPP

Open jarobase opened this issue 6 years ago • 0 comments

XEP-0070 allows a client to verify HTTP Requests via XMPP. It can be used in 2 factor authentication or as a replacement of passwords.

See: https://xmpp.org/extensions/xep-0070.html https://blog.agayon.be/xmpp_auth_django.html

There are some implementations on the server side:

  • A REST-like server: https://git.kingpenguin.tk/chteufleur/HTTPAuthentificationOverXMPP
  • As a Wordpress plugin: https://wordpress.org/plugins/xmpp-auth/

If the XEP-0070 is not supported, there is a fall back method (just plain text) so the client doesn't necessarily has to have support for this. Unfortunately, this method is usable with xabber-web.

In order to test several clients support, I made a small website:

https://demo.agayon.be/

I aim to make a website for non-tech people based on this feature.

Unfortunately, it is not really usable with xabber-web at the moment.

  • The message of the component are not received even with the fallback method.
  • It is not possible to add the component to roster (I don't know if it would respect the protocol)

As a result, people not familiarized with XMPP cannot use the functionality with xabber-web.

jarobase avatar Jun 03 '18 19:06 jarobase