From 60e57a16cc493652d731ea309d5bec23a5d9363c Mon Sep 17 00:00:00 2001
From: Konstantin Osipov <kostja@tarantool.org>
Date: Tue, 20 Jan 2015 15:36:43 +0300
Subject: [PATCH] Update the protocol specificaiton per feedback from Dinar
Sabitov
Cover mistakes found while implementing
https://github.com/ziontab/lua-nginx-tarantool
---
doc/www/content/doc/box-protocol.rst | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/doc/www/content/doc/box-protocol.rst b/doc/www/content/doc/box-protocol.rst
index 51677dd093..04ee37524c 100644
--- a/doc/www/content/doc/box-protocol.rst
+++ b/doc/www/content/doc/box-protocol.rst
@@ -155,9 +155,16 @@ type of value that follows. If a body has no keys, entire msgpack map for
the body may be missing. Such is the case, for example, in <ping> request.
--------------------------------------------------------------------------------
- Authorization
+ Authentication
--------------------------------------------------------------------------------
+When a client connects to the server, the server responds with a 128-byte
+text greeting message. Part of the greeting is base-64 encoded session salt -
+a random string which can be used for authentication. The length of decoded
+salt (44 bytes) exceeds the amount necessary to sign the authentication
+message (first 20 bytes). An excess is reserved for future authentication
+schemas.
+
.. code-block:: bash
PREPARE SCRAMBLE:
@@ -171,7 +178,7 @@ the body may be missing. Such is the case, for example, in <ping> request.
step_1 = sha1(password);
step_2 = sha1(step_1);
step_3 = sha1(salt, step_2);
- scramble = xor(step_1, step_4);
+ scramble = xor(step_1, step_3);
return scramble;
AUTHORIZATION BODY: CODE = 0x07
--
GitLab