NOTICE -- Experimental! Unstable API and code!

A JavaScript & WebAssembly module that brings GSS-API and Kerberos authentication to the web.

Including the library provides a highlevel API for acquiring Kerberos credentials via a KDCProxy (over HTTPS), and then authenticating resources protected with HTTP Negotiate protocol (aka SPNEGO).

It incorporates the MIT krb5 libraries compiled to JavaScript & WebAssembly using emscripten.

To import in the browser use the ES6 module (see example.html), while for node use the npm package with 'require' (using './lib/webgss_node.js', as it can't curretnly use the ES6 module).

import webgss from './lib/webgss.js';  // browser

const webgss = require('webgss'); // node

async function kerberizedFetch(url, kdcproxy, user, pwd)
{
    webgss.setKrb5Trace();

    let client = await webgss.gssClient(kdcproxy, user, pwd);

    let reply = await client.fetch(url);

    return reply;
}

Browser note: if the kdcproxy and / or the authenticated application are hosted on a different host or port than the JavaScript application, then you'd have to enable CORS on these servers, or the browser will likely reject the request.

npm install webgss

The npm package only contains the release build, a debug build can be made when building from source, as follows.

To build from source, first make sure that emcc is available, see emscripten's instructions on how to install and enable the emsdk, at: https://emscripten.org/docs/getting_started/downloads.html

Release build: make clean && make -j

Debug build: make clean && make -j debug

Optionally, run tests with: make check

Contributions of any kind are very welcome!

MIT Licensed, see LICENSE file.