XMPP BOSH toolkit


XMPP BOSH toolkit is released under GPLv2 license.


This code enables you to prebind a XMPP BOSH session with PHP and attach to the same session with jQuery. Traditionally when connecting to XMPP from Javascript using BOSH you need to pass JID and password to the client side that triggers authentication trough BOSH. This is both insecure and inefficient because your Javascript library must support all required authentication mechanisms. Much better idea is to authenticate on the server side (prebind BOSH sesion) and instead of passing JID and password to client side pass JID, SID and RID for attaching to BOSH session. This way the worst case scenario means that only one session can be compromised, and that your can drop authentication layer from your Javascript library.


This repository holds PHP XMPP BOSH prebind library forked from xmpp-prebind-php and patched to support additional authentication mechanisms. It also holds jQuery plugin for handling XMPP BOSH session attachment from client side using JID, SID and RID.


XMPP BOSH toolkit source code is hosted by GitHub from where you can download current copy of its master branch:

XMPP BOSH toolkit download

You can also fork or contribute to XMPP BOSH toolkit by visiting its official GitHub repository page:

XMPP BOSH toolkit on GitHub

A quality focused Magento specialized web development agency. Get in touch!

2 thoughts on “XMPP BOSH toolkit

Leave a Reply

Your email address will not be published. Required fields are marked *