[CSHARP-2823] Support SASLPrep on .NET Standard Created: 29/Oct/19  Updated: 08/Feb/22  Resolved: 08/Feb/22

Status: Closed
Project: C# Driver
Component/s: Security
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Major - P3
Reporter: Vincent Kam (Inactive) Assignee: Unassigned
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate
is duplicated by CSHARP-2669 Add string normalization for SaslPrep... Closed
Related
related to CSHARP-2160 Implement SASLPrep Closed

 Description   

RFC-4013 SASLPrep is a prerequisite for implementation of SCRAM-SHA-256. We currently only fully support SASLPrep on  the .NET Framework version of the driver. 

Relevant snippet from the ApiDocs:

In .NET Standard, authenticating via SCRAM-SHA-256 may not work with non-ASCII passwords because SaslPrep is not fully implemented due to the lack of a string normalization function in .NET Standard 1.5. Normalizing the password into Unicode Normalization Form KC beforehand MAY help. SCRAM-SHA-1 is the recommended alternative for now.



 Comments   
Comment by James Kovacs [ 08/Feb/22 ]

.NET Standard 2.0 added string normalization equivalent to that in .NET Framework. Previously we had #ifdefs for .NET Standard 1.5, which would pass the string through unnormalized on that TFM. With 2.14.0, we removed support for .NET Standard 1.5 and now all supported TFMs now normalize strings according to SASLPrep requirements.

Generated at Wed Feb 07 21:43:37 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.