Struct Scram 

pub struct Scram { /* private fields */ }

An exchange in progress.

Holds what the first message committed to, so the second can be checked against it.

Implementations

impl Scram

pub fn new(username: &str, password: &str, nonce: &str) -> Self

Start an exchange.

nonce must be unpredictable and never reused: it is what stops a recorded exchange being replayed. The core has no entropy source, so the host supplies it.

pub fn client_first(&self) -> Vec<u8>

The first message to send, including the GS2 header saying we do not use channel binding.

pub fn client_final( &mut self, server_first: &[u8], ) -> Result<Vec<u8>, ScramError>

Answer the server’s first message with our proof.

pub fn verify(&self, server_final: &[u8]) -> Result<(), ScramError>

Check the server’s closing message.

This is the half most implementations skip, and skipping it means a server that never knew the password can still convince the client it did.

Trait Implementations

impl Debug for Scram

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Deliberately hand-written: a derived one would print the password into whatever log the caller happens to write, and this type is reachable from Client, which is Debug.