Overview

Atomojo provides an authentication service that can easily be used with Xeerkat's XMPP server. This server allows you to create user realms and users within that realm via a REST interface.

Setup

Setup the authentication service as detailed in Auth Service Administration. You should create a realm for each domain for which you want separate identities.

Once you've configured your realm, you just need to configure a host with the domain and auth service for the realm.

For example, if your auth service runs at http://localhost:8080 and you created a realm named xmpp, your auth URI is:

   http://localhost:8080/realms/n/xmpp/auth

and your host configuration is:

  <host name='mydomain' auth='http://localhost:8080/realms/n/xmpp/auth'/>

If you are using Atom feeds, the domain entry would look like:

<entry>
<id>urn:uuid:a4f91c24-f071-4e4d-bae4-912d8241f575</id>
<updated>2008-01-11T08:00-08:00</updated>
<category scheme="http://www.xeerkat.org/O/" term="host">mydomain</category>
<category scheme="http://www.xeerkat.org/O/" term="auth">http://localhost:8080/realms/n/xmpp/auth</category>
</entry>

Note that you may share user realms for different domains. This has the effect that the same user and authentication credentials will be available for those domains that share the same user realm.

Running

Once you've configured your XMPP server to use an Atomojo auth service, you'll need to run both server processes at the same time. When a user attempts to authenticate, the auth service will be contacted at the URI configured and HTTP Basic Authentication request will be made. If the auth service is not running, the user authentication will fail just as if they had sent the wrong password.