[SIP Beyond VoIP] Sylkserver - authentication against an IMAP server

[Adrian Georgescu]

Hi Valentin,

Some comments.

Unless you have a modified client like yours, this server add-on is kind of useless because it only works for you. We do not want to always send the password in clear text over the web socket, as you require. So if you build a client to use IMAP and you can as well build the server and maintain it yourself.

Regarding the patch itself, it is blocking. If the IMAP server is not responding, the whole application is stuck. You should figure out an async way todo the IMAP authentication so that is non-blocking.  If you do this, we may add this functionality to the main server code with some comments about where. To download the modified client.

Regards,
Adrian
 
> On 31 Mar 2020, at 11:15, Valentin Kleibel <valentin at vrvis.at> wrote:
> 
> Hi,
> 
> We've been trying some things to achieve a simple authentication in Sylkserver without having to set up a SIP Server, and created a small patch that enables us to authenticate users via a trusted IMAP server.
> To be able to do so we had to disable the ha1-hashing in sylkrtc.js, but hash the passwords in sylkserver itself.
> 
> We created this as an draft for an alternative authentication.
> What do you think of it? Would you rather like to use Mixins for overwriting certain methods or do you object our approach from ground up?
> 
> All feedback is appreciated.
> Regards,
> Valentin
> <webrtc_imap_auth.diff>_______________________________________________
> SIPBeyondVoIP mailing list
> SIPBeyondVoIP at lists.ag-projects.com
> https://lists.ag-projects.com/mailman/listinfo/sipbeyondvoip