Details
-
Task
-
Resolution: Won't Do
-
Critical
-
None
-
None
Description
Elytron comes with set of SASL mechanisms (as requested by EAP7-530), but they don't fit SASL requirements.
New mechanisms has to be registered by IANA as requested by SASL RFC 4422 section 5 and Java SaslClientFactory and SaslServerFactory contracts.
Current list of mechanisms provided by Elytron, which are not IANA registered:
- DIGEST-SHA
- DIGEST-SHA-256
- DIGEST-SHA-512
- JBOSS-LOCAL-USER
Suggestion for improvement:
Provide specifications for the new mechanisms and register the names by IANA (see section 7 in RFC-4422).