2015 ...

januari (2) februari (1) maart (1) april mei juni (5) juli (1) augustus september (3) oktober (3) november (1) december (4)

TMongoWire can now authenticate over SCRAM-SHA-1

2015-07-09 00:51  mongoAuth3    [permalink]

→ TMongoWire

You can now use TMongoWire on mongoDB version 3.0 or newer and authenticate over SASL with SCRAM-SHA-1. This harder form of encryption offers a strong protection of your credentials and prevents against 'man in the middle' attacks. (But does not encrypt the data over the wire, it's advised to use TLS for that.) I did not find a ready-made SASL library for Delphi, so made the required encryption tools myself. I have added this support for HMAC and PBKDF2 to md5.zip.

To authenticate, call MongoWireAuthenticate from the new unit mongoAuth3.pas on a connected TMongoWire instance. (For backwards compatibility, mongoAuth.pas remains available.)

→