Skip to content

0.2.0

Choose a tag to compare

@ChadSikorra ChadSikorra released this 22 Mar 23:31
cffd4fd
  • Fix CRAM-MD5 server challenge to store the encoded challenge string (e.g. ) in the SASL context rather than the raw nonce, so the password callable receives the value the client used for its HMAC per RFC 2195.
  • Add SCRAM support (RFC 5802 / RFC 7677) covering all standard variants: SCRAM-SHA-1, SCRAM-SHA-224, SCRAM-SHA-256, SCRAM-SHA-384, SCRAM-SHA-512, SCRAM-SHA3-512, and their respective -PLUS channel-binding counterparts.