sipPassword

wrtc.sipPassword is a string parameter containing user's SIP password.

It is used in SIP systems using digest authentication to log in to SIP server.

As wrtc.sipPassword contains user's SIP password in clear text it is a major security risk!

To avoid security risks wrtc.sipPassword should only contain new passwords freshly entered by user.

line.authenticate() creates a wrtc.sipHa1 hashsum of the wrtc.sipPassword password upon call.

After line.authenticate() has been called you should set wrtc.sipPassword=undefined; so that next call to line.authenticate() uses wrtc.sipHa1 instead, and no clear text copy of the user's password is available anywhere on your page or its code.

Value

String containing user's SIP password.

Default value

Undefined.

Usage

wrtc.sipPassword is used in line.authenticate().

Usually you set wrtc.sipPassword in your wrtc.onAuthenticate() event handler before it calls obj.authenticate().

However if you want to change contents of wrtc.sipPassword at some other time you must call wrtc.changeName() to trigger a new SIP authentication (a new wrtc.onAuthenticate() event).

See also

ixnx/wrtc/js/api/wrtc/sippassword.txt · Last modified: by tibor
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0