通过ejabberd日志分析客户端登录流程

通过ejabberd的日志，整理了下客户端登录流程。

1. 通过TCP连接5222端口的流程：

(1) 客户端向服务器发送stream流

<stream:stream to="nba.com"
               xml:lang="*"
               version="1.0"
               xmlns:stream="http://etherx.jabber.org/streams"
               xmlns="jabber:client">

(2) 服务器应答stream

<?xml version='1.0'?>
<stream:stream xmlns='jabber:client'
               xmlns:stream='http://etherx.jabber.org/streams'
               id='4171758611'
               from='nba.com'
               version='1.0'
               xml:lang='en'>

(3) 服务器发送流特性

<stream:features>
	<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
	<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
		<mechanism>PLAIN</mechanism>
	</mechanisms>
	<c xmlns='http://jabber.org/protocol/caps'
	   hash='sha-1'
	   node='http://www.process-one.net/en/ejabberd/'
	   ver='AxFG3uvIZfHAbBjOUb9t3klmoos='/>
	<register xmlns='http://jabber.org/features/iq-register'/>
</stream:features>

(4) 客户端发送tls请求

<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

(5) 服务器回应并开始TLS握手

<proceed xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>

(6) TLS握手完成后，客户端重新初始化stream流

<stream:stream to="nba.com"
               xml:lang="*"
               version="1.0"
               xmlns:stream="http://etherx.jabber.org/streams"
               xmlns="jabber:client">

(7) 服务器应答

<?xml version='1.0'?>
<stream:stream xmlns='jabber:client'
               xmlns:stream='http://etherx.jabber.org/streams'
               id='703708799'
               from='nba.com'
               version='1.0'
               xml:lang='en'>

(8) 服务器告知客户端支持的SASL验证机制

<stream:features>
	<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
		<mechanism>PLAIN</mechanism>
	</mechanisms>
	<c xmlns='http://jabber.org/protocol/caps'
	   hash='sha-1'
	   node='http://www.process-one.net/en/ejabberd/'
	   ver='AxFG3uvIZfHAbBjOUb9t3klmoos='/>
	<register xmlns='http://jabber.org/features/iq-register'/>
</stream:features>

(9) 客户端选择简单认证机制并发送用户名密码

<auth xmlns="urn:ietf:params:xml:ns:xmpp-sasl" mechanism="PLAIN">
AGNoZW53ZW5jYW4ja2VkYWNvbS5jb20AMjEyMThjY2E3NwgzNGQyYmExOTIyYzMzZTAxNTExMDU=
</auth>

(10) 服务器告诉客户端校验通过，SASL握手完成

<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'/>

(11) 客户端再次初始化stream流

<stream:stream to="nba.com"
               xml:lang="*"
               version="1.0"
               xmlns:stream="http://etherx.jabber.org/streams"
               xmlns="jabber:client">

(12) 服务器应答

<?xml version='1.0'?>
<stream:stream xmlns='jabber:client'
               xmlns:stream='http://etherx.jabber.org/streams'
               id='2767342509'
               from='nba.com'
               version='1.0'
               xml:lang='en'>

(13) 通知客户端进行资源绑定

<stream:features>
	<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'/>
	<session xmlns='urn:ietf:params:xml:ns:xmpp-session'/>
	<c xmlns='http://jabber.org/protocol/caps'
	   hash='sha-1'
	   node='http://www.process-one.net/en/ejabberd/'
	   ver='AxFG3uvIZfHAbBjOUb9t3klmoos='/>
	<register xmlns='http://jabber.org/features/iq-register'/>
</stream:features>

(14) 客户端请求资源绑定

<iq type="set" id="0">
	<bind xmlns="urn:ietf:params:xml:ns:xmpp-bind">
	<resource>boston</resource>
	</bind>
</iq>

(15) 服务器应答

<iq id='0' type='result'>
	<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'>
	<jid>rondo@nba.com/boston</jid>
	</bind>
</iq>

(16) 客户端请求session绑定

<iq type="set" id="1">
	<session xmlns="urn:ietf:params:xml:ns:xmpp-session"/>
</iq>

(17) 服务器应答

<iq type='result' id='1'>
	<session xmlns='urn:ietf:params:xml:ns:xmpp-session'/>
</iq>

至此，可认为登陆完成，后续进行能力协商，发送其他请求消息，发送出息消息等。

2. 通过http连接5280端口的流程

http方式的交互是通过BOSH协议完成的，详细可参见

http://xmpp.org/extensions/xep-0124.html

http://xmpp.org/xmpp-protocols/xmpp-extensions/

具体流程为：

(1) 发起bosh会话

<body rid='16488487'
      xmlns='http://jabber.org/protocol/httpbind'
      to='nba.com'
      xml:lang='en'
      wait='60'
      hold='1'
      content='text/xml;charset=utf-8'
      ver='1.6'
      xmpp:version='1.0'
      xmlns:xmpp='urn:xmpp:xbosh'/>

(2) 服务器应答

<body xmlns='http://jabber.org/protocol/httpbind'
      sid='90582e464361adb537351e65ecfa66d1336ea486'
      wait='60'
      requests='2'
      inactivity='30'
      maxpause='120'
      polling='2'
      ver='1.8'
      from='nba.com'
      secure='true'
      authid='1145683568'
      xmlns:xmpp='urn:xmpp:xbosh'
      xmlns:stream='http://etherx.jabber.org/streams'
      xmpp:version='1.0'>
    <stream:features xmlns:stream='http://etherx.jabber.org/streams'>
        <mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
            <mechanism>PLAIN</mechanism>
        </mechanisms>
        <c xmlns='http://jabber.org/protocol/caps'
           hash='sha-1'
	   node='http://www.process-one.net/en/ejabberd/'
	   ver='AxFG3uvIZfHAbBjOUb9t3klmoos='/>
        <register xmlns='http://jabber.org/features/iq-register'/>
    </stream:features>
</body>

(3) 客户端发送用户名密码

<body rid='16488488'
      xmlns='http://jabber.org/protocol/httpbind'
      sid='90582e464361adb537351e65ecfa66d1336ea486'>
    <auth xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='PLAIN'>
        AGNoZW53ZW5jYW4ja2VkYWNvbS5jb20AMjEyMThjY2E3NwgzNGQyYmExOTIyYzMzZTAxNTExMDU=
    </auth>
</body>

(4) 服务器响应告知校验结果

<body xmlns='http://jabber.org/protocol/httpbind'>
    <success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'/>
</body>

(5) 客户端重新初始化stream流

<body rid='16488489'
      xmlns='http://jabber.org/protocol/httpbind'
      sid='90582e464361adb537351e65ecfa66d1336ea486'
      to='nba.com'
      xml:lang='en'
      xmpp:restart='true'
      xmlns:xmpp='urn:xmpp:xbosh'/>

(6) 服务器通知完成资源绑定

<body xmlns='http://jabber.org/protocol/httpbind'
      sid='90582e464361adb537351e65ecfa66d1336ea486'
      wait='60'
      requests='2'
      inactivity='30'
      maxpause='120'
      polling='2'
      ver='1.8'
      from='nba.com'
      secure='true'
      authid='3855745118'
      xmlns:xmpp='urn:xmpp:xbosh'
      xmlns:stream='http://etherx.jabber.org/streams'
      xmpp:version='1.0'>
    <stream:features xmlns:stream='http://etherx.jabber.org/streams'>
        <bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'/>
        <session xmlns='urn:ietf:params:xml:ns:xmpp-session'/>
        <c xmlns='http://jabber.org/protocol/caps'
	   hash='sha-1'
	   node='http://www.process-one.net/en/ejabberd/'
	   ver='AxFG3uvIZfHAbBjOUb9t3klmoos='/>
	   <register xmlns='http://jabber.org/features/iq-register'/>
    </stream:features>
</body>

(7) 客户端请求资源绑定

<body rid='16488490'
      xmlns='http://jabber.org/protocol/httpbind'
      sid='90582e464361adb537351e65ecfa66d1336ea486'>
    <iq type='set' id='_bind_auth_2' xmlns='jabber:client'>
	    <bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'>
	    <resource>boston</resource>
	    </bind>
    </iq>
</body>

(8) 服务器应答

<body xmlns='http://jabber.org/protocol/httpbind'>
    <iq xmlns='jabber:client' id='_bind_auth_2' type='result'>
	    <bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'>
	    <jid>rondo@nba.com/boston</jid>
	    </bind>
    </iq>
</body>

(9) 客户端请求session绑定

<body rid='16488491'
      xmlns='http://jabber.org/protocol/httpbind'
      sid='90582e464361adb537351e65ecfa66d1336ea486'>
    <iq type='set' id='_session_auth_2' xmlns='jabber:client'>
	    <session xmlns='urn:ietf:params:xml:ns:xmpp-session'/>
    </iq>
</body>

(10) 服务器应答

<body xmlns='http://jabber.org/protocol/httpbind'>
    <iq xmlns='jabber:client' id='_session_auth_2' type='result'>
	    <session xmlns='urn:ietf:params:xml:ns:xmpp-session'/>
    </iq>
</body>

关于作者

作者的专辑

作者的其它热门文章

热门资讯

热门软件

OSCHINA 社区

在线工具

攻略

公众号

视频号

问题反馈