Implement XEP-0480: SASL Upgrade Tasks

[tmolitor-stud-tu]

This is the last missing piece for modern SASL2 authentication: XEP-0480: SASL Upgrade Tasks is needed to make sure clients can update the old SHA-1 password hashes to more secure alternatives like SHA-256.

This isn't as urgent as the other SASL2 related stuff you just implemented, but needed to make sure we can transition from SHA-1 to something more secure before SCRAM-SHA-1 becomes insecure.
This transition will take quite some time, so it is good to start early with this.

I promise this is the last SASL-related implementation request I'm doing ;)

BTW: This XEP was originally developed inside the main SASL2 XEP (XEP-0388) but later factored out to not create another of these large XEPs like MUC or PubSub.

[tmolitor-stud-tu]

Side note: I've wrote a blog post about modern SASL authentication that more or less led to all of these SASL2 related XEPs over here: https://monal-im.org/post/00004-sasl/

[Neustradamus]

Important too :)

[Neustradamus]

@tmolitor-stud-tu: Good news, @prefiks has added the support in xmpp 1.9.0 and ejabberd 24.10, a big thanks!

• 85d4cb6
• processone/ejabberd@e9e678a

[tmolitor-stud-tu]

Nice, thanks!!

[tmolitor-stud-tu]

@badlop I'm sorry, the xep had two errors, fixed over here: xsf/xeps#1403
without base64 encoding, the salt could contain characters not allowed in xml and the schema didn't match the description and examples regarding the iterations attribute (it was still an element in the schema)

please fix the ejabberd implementation to match the new fixed xep version 0.2.0.

[tmolitor-stud-tu]

Example:

RECV(127): <task-data xmlns='urn:xmpp:sasl:2'><salt iterations='4096' xmlns='urn:xmpp:scram-upgrade:0'>êª0flüb˚-h)√*!▒æ</salt></task-data>
XML parse error occurred: line: 1 , col: 1624 desc: The operation couldn’t be completed. (NSXMLParserErrorDomain error 9.)

[weiss]

Fixed, thanks.

[Neustradamus]

@tmolitor-stud-tu, @weiss: Thanks for your reactivity!

[Neustradamus]

@badlop: Like you have seen, the @tmolitor-stud-tu XEP-0480 fix has been merged!

XEP-0480 0.2.0 is now official:

• https://xmpp.org/extensions/xep-0480.html

@weiss, @badlop: Thanks for your reactivity!

• weiss: xmpp: 423bc3d
• weiss: xmpp: f555154
• badlop xmpp 3e883c3
• weiss: ejabberd: processone/ejabberd@b90c48f

@badlop: Oups, I have seen that it is not upstream, can you update too?

• badlop/ejabberd@67aa9de

---

Initial commits from @prefiks are here:

• xmpp: 85d4cb6
• ejabberd: processone/ejabberd@e9e678a

ejabberd 24.10 specifications added by badlop:

• processone/ejabberd@bdd8ba1