[jira] [Work logged] (ARTEMIS-3106) Support for SASL-SCRAM

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ARTEMIS-3106?focusedWorklogId=577382&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-577382 ]

ASF GitHub Bot logged work on ARTEMIS-3106:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 06/Apr/21 07:31
            Start Date: 06/Apr/21 07:31
    Worklog Time Spent: 10m 
      Work Description: laeubi commented on pull request #3470:
URL: https://github.com/apache/activemq-artemis/pull/3470#issuecomment-813896235


   > I'm going to leave further review here for some of the main broker maintainers.
   
   Can you add relevant maintainers here so we can further proceed?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

    Worklog Id:     (was: 577382)
    Time Spent: 17h 40m  (was: 17.5h)

> Support for SASL-SCRAM
> ----------------------
>
>                 Key: ARTEMIS-3106
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3106
>             Project: ActiveMQ Artemis
>          Issue Type: New Feature
>          Components: AMQP
>            Reporter: Christoph Läubrich
>            Priority: Major
>          Time Spent: 17h 40m
>  Remaining Estimate: 0h
>
> With the enhancements in ARTEMIS-33 / [PR 3432|https://github.com/apache/activemq-artemis/pull/3432] it would be now possible to plug-in new SASL mechanism.
> One popular one is [SASL-SCRAM|https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism] because it allows channelbinding together with secure storage of user-credential.
> I have created an [implementation of this for Artemis AMQP|https://github.com/laeubi/scram-sasl/tree/artemis/artemis] based on the [SCRAM SASL authentication for Java|https://github.com/ogrebgr/scram-sasl] code with some enhancements/cleanups to the original.
> As the source is already Apache licensed I'd like to propose to include this in the Artemis code-base. This would greatly enhance the interoperability with other implementations e.g. Apache QPID. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)