Sand Fox

<p>XMPP Enabled provides a single function API for other plugins that use Jabber/XMPP messaging protocol.<br />
See API section for details if you want to use XMPP protocol in your notifications.</p>
<ul>
<li>GitHub page: https://github.com/sandfoxme/xmpp-enabled</li>
</ul>
<h3>Thanks to</h3>
<ul>
<li>Mako N (Japanese translation and i18n support)</li>
</ul>
<h3>Plugin API</h3>
<h4>The Single Function</h4>
<p>The single function for sending XMPP Messages is <code>xmpp_enabled</code>. It can be called directly from any WordPress plugin</p>
<pre><code>xmpp_enabled($recipient, $message, $subject='', $type='normal');
</code></pre>
<ul>
<li>$recipient is a valid (bare or full) JID of the recipient like ‘juliet@capulet.net’</li>
<li>$message is a plain text message to be sent</li>
<li>$subject is a title line for message. It is usually omitted for chat-type messages</li>
<li>$type is a type of message. It can be ‘chat’, ‘normal’ or ‘headline’. See <a href="http://www.ietf.org/rfc/rfc3921.txt" rel="nofollow ugc">RFC 3921</a> for details</li>
</ul>
<p><em>Example:</em> <code>xmpp_send('subscriber@something.com',"Read our new post:\nhttp://something.com/new-post",'New post is published','headline');</code></p>
<h4>Create submenu in the XMPP Enabled section</h4>
<p>XMPP Enabled creates it’s own section and you’re free to use it for your plugins. The code is <code>'xmpp-enabled'</code></p>
<p><em>Example:</em> <code>add_submenu_page('xmpp-enabled', 'Jabber Comment Notifications', 'Comment Notifications', 'administrator', __FILE__, 'jcommnotify_settings');</code></p>
<p>See <a href="https://codex.wordpress.org/Adding_Administration_Menus" rel="nofollow ugc">Adding Administration Menus</a> in WordPress Codex for further details</p>


XMPP Enabled

XMPP Enabled provides a single-function API for other plugins that use Jabber/XMPP messaging protocol.

Jehan

<p>This plugin has two main features:</p>
<ul>
<li>any reader on your website can comment if one has an Instant Messaging<br />
address (XMPP protocol, otherwise called Jabber. A Gmail or a LiveJournal<br />
account for instance are such standard IM identifiers as well);</li>
<li>a subscribed user (whatever its role) can authenticate with one’s IM<br />
address if they set their IM address.</li>
</ul>
<p>This plugin is still in experimental state but is usable.</p>
<h4>Detailed Process</h4>
<p>The authentication part is something like openID, except that it uses your<br />
existing IM address: you ask for authentication on a website, and it pops-up a<br />
confirmation via IM (that you can accept, or refuse).</p>
<p>Considering that the IM protocol (XMPP) is very secure,<br />
all the infrastructure to securely exchange an authentication request is<br />
there. No need to make any new account, no need a special client, nor a<br />
identity third party provider, and that’s really instantaneous (as <em>instant</em><br />
messaging) and more secure than HTTP or SMTP protocols.</p>
<h4>Spam Protection</h4>
<p>It adds an additional layer to protect against Spam by verifying an<br />
identity using a very secure and modern protocol (XMPP), which also is instant,<br />
hence much more reliable in any way than email for instance.</p>
<h4>Secure and Easy Login</h4>
<p>Many reasons to use such a plugin for login:</p>
<ul>
<li>not to have to remember a new password (password-login can be disabled in<br />
your profile, on a per-user choice);</li>
<li>you are in a very insecure environment (for instance a cybercafe) and consider<br />
only your IM account to be a minimum securized. Or better, you run an IM<br />
client on your smartphone (or a similar tool), so you would receive the query<br />
on this personal item while never typing any kind of password on the insecure<br />
platform where you log.</li>
<li>And so on.</li>
</ul>
<h3>Configuration</h3>
<h4>Publishing Account</h4>
<p>This section contains the connection parameters of the account which will be<br />
used as a wordpress bot. I would personnaly advice to create a dedicated account<br />
just for it (you may also use your personal account of course, as the plugin’s<br />
bot will create a resource identifier unique for every connection) and to<br />
configure it to refuse any contact and communication (as noone will have to<br />
add it to one’s roster, except you maybe for test or debugging purpose?).<br />
The fields are:</p>
<ul>
<li>The bot address (bare jid form: mybotname@myserveraddress);</li>
<li>the password.</li>
</ul>
<h4>Advanced Connection Parameters</h4>
<p>By default xmpp-auth can use SRV records which is a recommended way to<br />
advertize server and port from a domain name (see for instance<br />
http://dns.vanrein.org/srv/ for details).</p>
<p>This is an advanced section in case your server does not use SRV AND uses a server<br />
which is not the same as the domain from the jid or a port different from the<br />
default one (5222).</p>
<p>Hence there will be very very few cases where you will have to fill this<br />
section and if you don’t understand all what I say here, just don’t fill<br />
anything there (if you fill even only one field, then it will be used instead<br />
of SRV and default values).</p>
<p>The default values will be used if the fields are empty and no SRV is configured on<br />
the Jabber server:</p>
<ul>
<li>the XMPP server (often the same as ‘myseveraddress’ of the jid);</li>
<li>the XMPP port (usually 5222).</li>
</ul>
<h3>TODO</h3>
<p>Features I am considering:</p>
<ul>
<li>check quickstart (http://xmpp.org/extensions/inbox/quickstart.html). In<br />
particular, I should at least cache DNS lookups now.</li>
<li>deactivate IM features when plugin not configured.</li>
<li>For comments, use the IM avatar of the commenter instead of gravatar;</li>
<li>Make various notifications usually done by email be done by IM instead (if<br />
adequate);</li>
<li>Display the comment’s JID on the admin page (as we display the email<br />
address, obviously only for administrators);</li>
<li>Add Scram-* to SASL package;</li>
<li>Make the generic XMPP part a PEAR package.</li>
<li>Subscribe with XMPP JID.</li>
<li>Login with JID or username (both possible).</li>
<li>If password is disabled, it also cannot be resetted.</li>
<li>Make user choose to receive password reset or other notification through IM<br />
instead of email.</li>
</ul>
<h3>XMPP Features</h3>
<p>Full Secure XML Stream with:</p>
<ul>
<li>TLS (with real certificate verification, so confidentiality and<br />
authentication);</li>
<li>SASL (Digest-MD5, CRAM-MD5 and PLAIN only for now);</li>
<li>SRV records “randomization” algorithm.</li>
</ul>
<h3>Contacts</h3>
<p>You can have some news about this plugin on <a href="http://jehan.zemarmot.net" title="my public diary" rel="nofollow ugc">my freedom<br />
haven</a>.<br />
You can also drop me an instant message on “hysseo” at zemarmot.net.</p>
<p>Have a nice life!</p>


XMPP Authentication

Allows users to authenticate without password via XMPP and for visitors to be filtered by XMPP verification.

XMPP Enabled vs XMPP Authentication