6c7296a37b
In the absence of checks on the from address, it is possible for other clients to fake an answer to an IQ request. This commit adds an IQReplyFilter, which drops all packets which are not a valid reply to an IQ request. In particular, it checks for packet id, from address and packet type. Most(?) places waiting for a reply to an IQ request are converted to use the IQReplyFilter. For a discussion of the issues, see the thread "Spoofing of iq ids and misbehaving servers" from 2014-01 on the jdev@jabber.org mailing list and following discussion in February and March. |
||
|---|---|---|
| bosh/src/main/java/org/jivesoftware/smack | ||
| compression-jzlib/src/main/java/org/jivesoftware/smack/compression | ||
| config | ||
| core | ||
| debug/src/main | ||
| documentation | ||
| experimental/src | ||
| extensions/src | ||
| jingle | ||
| legacy/src | ||
| resolver-dnsjava/src/main/java/org/jivesoftware/smack/util/dns | ||
| resolver-javax/src/main/java/org/jivesoftware/smack/util/dns | ||
| resources | ||
| sample | ||
| tcp/src | ||
| .gitignore | ||
| build.gradle | ||
| README.md | ||
| settings.gradle | ||
Smack
About
Smack is an Open Source, cross-platform, easy to use Java XMPP client library.
Communicate with XMPP servers to perform real-time collaboration, including instant messaging and group chat.
Key Advantages :
-
Extremely simple to use, yet powerful API. Sending a text message to a user can be accomplished in only a few lines of code:
Connection connection = new XMPPConnection("jabber.org"); connection.connect(); connection.login("mtucker", "password"); Chat chat = connection.getChatManager() .createChat("jsmith@jivesoftware.com", new MessageListener() { public void processMessage(Chat chat, Message message) { System.out.println("Received message: " + message); } }); chat.sendMessage("Howdy!"); -
Doesn't force you to code at the packet level, as other libraries do. Smack provides intelligent higher level constructs such as the Chat and Roster classes, which let you program more efficiently.
-
Does not require that you're familiar with the XMPP XML format, or even that you're familiar with XML.
-
Provides easy machine to machine communication. Smack lets you set any number of properties on each message, including properties that are Java objects.
-
Open Source under the Apache License, which means you can incorporate Smack into your commercial or non-commercial applications.
Smack is an Open Source XMPP (Jabber) client library for instant messaging and presence. A pure Java library, it can be embedded into your applications to create anything from a full XMPP client to simple XMPP integrations such as sending notification messages and presence-enabling devices.
Smack - an Ignite Realtime community project.
Bug Reporting
Only a few usrs have acces for for filling bugs in the tracker. New users should:
- Create a forums account (only e-mail is a requirement, you can skip all the other fields).
- Login to a forum account
- Press New in your toolbar and choose Discussion
- Choose the Smack Dev forum of Smack and add the tag 'bug_report' to your new post
Please search for your issues in the bug tracker before reporting.
Contact
The developeres hang around in #smack (freenode, IRC). Remeber that it may take some time (~hours) to get a response.
You can also reach us via the Smack Developers Forum.
Resources
- Bug Tracker: http://issues.igniterealtime.org/browse/SMACK
- Nightly Builds: http://www.igniterealtime.org/downloads/nightly_smack.jsp
- User Forum: http://community.igniterealtime.org/community/support/smack_users
- Dev Forum: http://community.igniterealtime.org/community/developers/smack
- Snapshots: https://oss.sonatype.org/content/repositories/snapshots/org/igniterealtime/smack/
Ignite Realtime
Ignite Realtime is an Open Source community composed of end-users and developers around the world who are interested in applying innovative, open-standards-based Real Time Collaboration to their businesses and organizations. We're aimed at disrupting proprietary, non-open standards-based systems and invite you to participate in what's already one of the biggest and most active Open Source communities.