class CQL::Postgres::Auth::ScramSha256

• CQL::Postgres::Auth::ScramSha256
• Reference
• Object

Overview

SCRAM-SHA-256 (RFC 5802 / RFC 7677) without channel binding. The user name in the exchange is empty because the server takes it from the startup packet. The password is NFKC-normalised, which is what SASLprep (RFC 4013) comes to for the text people actually type; servers store the normalised form.

Defined in:

Constant Summary

MAX_ITERATIONS = 1000000

PBKDF2 blocks the thread while it runs (about 0.4 s per million rounds); servers default to 4096.

MECHANISM = "SCRAM-SHA-256"

Constructors

• .new(password : String, nonce : String = Random::Secure.base64(18), username : String = "")

Instance Method Summary

• #continue(server_first : Bytes) : Bytes

  Answers the server-first message with the client proof.

• #initial_response : Bytes
• #inspect(io : IO) : Nil

  Appends a String representation of this object which includes its class name, its object address and the values of all instance variables.

• #verified? : Bool
• #verify(server_final : Bytes) : Nil

  Checks the server-final message proves the server knows the password too.

Constructor Detail

Instance Method Detail

class Person
  def initialize(@name : String, @age : Int32)
  end
end

Person.new("John", 32).inspect # => #<Person:0x10fd31f20 @name="John", @age=32>