[OASIS Issue Tracker] (MQTT-568) Authentication

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

     [ https://issues.oasis-open.org/browse/MQTT-568?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ian Craggs updated MQTT-568:
----------------------------
    Proposal: 
_(Assuming the adoption of the connect flags changes in https://issues.oasis-open.org/browse/MQTT-576)._

_Section 5.2.2 MsgType_

_Add AUTH MsgType to table 3. Value 0x03_

Section 5.4.4 CONNECT

_Change 'Flags' to 'Connect Flags' in table 9_
 * Length and MsgType: see Section 5.2
 * Connect Flags:
 ** Authentication: if set, an AUTH packet follows for authentication
 ** Will: _(unchanged)_
 ** CleanSession: _(unchanged)_

Section 5.4 Format of Individual Messages

5.4.5.1 AUTH
|Length
 (octet 0)|MsgType
 ÂÂÂÂÂ (1)|Reason Code
 ÂÂÂÂÂ (2)|Auth Method Length (k)
 ÂÂÂÂÂÂÂÂÂÂÂÂÂ (3)|Auth Method
 ÂÂÂÂÂ (4:4+k)|Auth Data 
 (5+k:n)|

The AUTH message is first sent by the client as part of an authentication exchange. The server responds with another AUTH message and so on until the authentication is complete. The server then responds with a CONNACK message.
 * Length and MsgType: see section 5.2
 * Reason Code: The sender of the AUTH Packet MUST use one of the Authenticate Reason Codes: 

||Value||Hex||Reason Code Name||Sent by||Description||
|0|0x00|Success|Server|Authentication is successful|
|24|0x18|Continue authentication|Client or Server|Continue the authentication with another step|
|25|0x19|Re-authenticate|Client|Initiate a re-authentication|

 * Auth Method Length: the length of the Auth method string
 * Auth Method String: an UTF-8 Encoded String containing the name of the authentication method
 * Auth Data: Binary Data containing authentication data. The contents of this data are defined by the authentication method

For a simple cleartext password analogous to MQTT user name and password, the SASL PLAIN method can be used.

Â

Â

Â

> Authentication
> --------------
>
>                 Key: MQTT-568
>                 URL: https://issues.oasis-open.org/browse/MQTT-568
>             Project: OASIS Message Queuing Telemetry Transport (MQTT) TC
>          Issue Type: Improvement
>          Components: MQTT-SN
>    Affects Versions: MQTT-SN-1.2
>            Reporter: Ian Craggs
>            Assignee: Ian Craggs
>            Priority: Major
>
> Authentication has been raised as an important omission.Â
> Mirroring the MQTT 5.0 AUTH packet seems like a good idea.



--
This message was sent by Atlassian Jira
(v8.3.3#803004)