"Matthew A. Miller" <[EMAIL PROTECTED]> wrote on 26-2-
2003 2:42:45: 
>
>The more I read this thread, the more I agree with both sides...
>
>Is there middle ground to be had?  What if XMPP were defined in such a
>way that if a connection/session attempted to auth as an already online
>one, it was up to the server.  If the server decided it was allowed, it
>sent the appropriate iq-error to the original connection (302?) along
>with the disconnect.  If the server decided it wasn't, it sent a 409 or
>405 iq-error to the new connection along with the diconnect.
>
>Does the above sound reasonable?  If so, I'll make a point of
>approaching the XMPP I-D authors on it.

In the current XMPP spec (draft-ietf-xmpp-core-04)  we can find this:

"
The following codes are defined for stream-level errors: 
302 - Redirect 
400 - Bad XML 
404 - Unknown Host 
410 - Gone 
500 - Internal Server Error 
505 - Version Not Supported 
"

I'd like to see 409 included here as well.

409 is already including amongst the standard error, so it's can be 
used for denying authentication: 

"
409 (Conflict) - Code 409 is returned when a request cannot be 
fulfilled because of an inherent conflict (e.g., because a client 
attempts to authorize a resouce name that is already in use). " 

The description would have to be changed a little too since it's not 
request-specific anymore. 


-- 
Tijl Houtbeckers
Software Engineer @ Splendo
The Netherlands

_______________________________________________
jdev mailing list
[EMAIL PROTECTED]
http://mailman.jabber.org/listinfo/jdev

Reply via email to