License

XMPP BOSH toolkit is released under GPLv2 license.

Description

This code enables you to prebind a XMPP BOSH session with PHP and attach to the same session with jQuery. Traditionally when connecting to XMPP from Javascript using BOSH you need to pass JID and password to the client side that triggers authentication trough BOSH. This is both insecure and inefficient because your Javascript library must support all required authentication mechanisms. Much better idea is to authenticate on the server side (prebind BOSH sesion) and instead of passing JID and password to client side pass JID, SID and RID for attaching to BOSH session. This way the worst case scenario means that only one session can be compromised, and that your can drop authentication layer from your Javascript library.

Contents

This repository holds PHP XMPP BOSH prebind library forked from xmpp-prebind-php and patched to support additional authentication mechanisms. It also holds jQuery plugin for handling XMPP BOSH session attachment from client side using JID, SID and RID.

Download

XMPP BOSH toolkit source code is hosted by GitHub from where you can download current copy of its master branch:

You can also fork or contribute to XMPP BOSH toolkit by visiting its official GitHub repository page: