Make the secret actually secret, use HMAC for authentication

This commit is contained in:
gabixdev 2019-03-01 15:45:49 +00:00
parent 5d2869b53c
commit e2258ed728
1 changed files with 2 additions and 1 deletions

View File

@ -66,6 +66,7 @@ Sent by the server when a connection is established.
| field | type | description | | field | type | description |
| --: | :-- | :-- | | --: | :-- | :-- |
| heartbeat\_interval | integer | amount of milliseconds to heartbeat with | | heartbeat\_interval | integer | amount of milliseconds to heartbeat with |
| nonce | string | random 10-character string used as a message in HMAC authentication |
## IDENTIFY message ## IDENTIFY message
@ -73,7 +74,7 @@ Sent by the client to identify itself.
| field | type | description | | field | type | description |
| --: | :-- | :-- | | --: | :-- | :-- |
| token | string | secret value kept between client and server | | token | string | `HMAC(SHA256, key=[secret shared between server and client]), data=[nonce from HELLO]` |
## RESUME message ## RESUME message