Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
@xmpp/client
Advanced tools
An XMPP client is an entity that connects to an XMPP server.
@xmpp/client
package includes a minimal set of features to connect and authenticate securely and reliably.
It supports Node.js, browsers and React Native. See below for differences.
npm install @xmpp/client @xmpp/debug
const { client, xml, jid } = require("@xmpp/client");
or
<script
src="https://unpkg.com/@xmpp/client@VERSION/dist/xmpp.min.js"
crossorigin
></script>
Replace VERSION
with the desired version number.
const { client, xml, jid } = window.XMPP;
const { client, xml } = require("@xmpp/client");
const debug = require("@xmpp/debug");
const xmpp = client({
service: "ws://localhost:5280/xmpp-websocket",
domain: "localhost",
resource: "example",
username: "username",
password: "password",
});
debug(xmpp, true);
xmpp.on("error", (err) => {
console.error(err);
});
xmpp.on("offline", () => {
console.log("offline");
});
xmpp.on("stanza", async (stanza) => {
if (stanza.is("message")) {
await xmpp.send(xml("presence", { type: "unavailable" }));
await xmpp.stop();
}
});
xmpp.on("online", async (address) => {
// Makes itself available
await xmpp.send(xml("presence"));
// Sends a chat message to itself
const message = xml(
"message",
{ type: "chat", to: address },
xml("body", {}, "hello world"),
);
await xmpp.send(message);
});
xmpp.start().catch(console.error);
See xml package
See jid package
options
<Object
>
service
<string>
The service to connect to, accepts an URI or a domain.
domain
lookup and connect to the most secure endpoint using @xmpp/resolvexmpp://hostname:port
plain TCP, may be upgraded to TLS by @xmpp/starttlsxmpps://hostname:port
direct TLSws://hostname:port/path
plain WebSocketwss://hostname:port/path
secure WebSocketdomain
<string>
Optional domain of the service, if omitted will use the hostname from service
. Useful when the service domain is different than the service hostname.resource
<string
> Optional resource for resource bindingusername
<string>
Optional username for saslpassword
<string>
Optional password for saslReturns an xmpp object.
xmpp
is an instance of EventEmitter.
online
indicates that xmpp
is authenticated and addressable. It is emitted every time there is a successfull (re)connection.
offline
indicates that xmpp
disconnected and no automatic attempt to reconnect will happen (after calling xmpp.stop()
).
Additional status:
connecting
: Socket is connectingconnect
: Socket is connectedopening
: Stream is openingopen
: Stream is openclosing
: Stream is closingclose
: Stream is closeddisconnecting
: Socket is disconnectingdisconnect
: Socket is disconnectedYou can read the current status using the status
property.
const isOnline = xmpp.status === "online";
You can listen for status change using the status
event.
status
Emitted when the status changes.
xmpp.on("status", (status) => {
console.debug(status);
});
error
Emitted when an error occurs. For connection errors, xmpp
will reconnect on its own using @xmpp/reconnect however a listener MUST be attached to avoid uncaught exceptions.
<Error>
xmpp.on("error", (error) => {
console.error(error);
});
stanza
Emitted when a stanza is received and parsed.
// Simple echo bot example
xmpp.on("stanza", (stanza) => {
console.log(stanza.toString());
if (!stanza.is("message")) return;
const { to, from } = stanza.attrs;
stanza.attrs.from = to;
stanza.attrs.to = from;
xmpp.send(stanza);
});
online
Emitted when connected, authenticated and ready to receive/send stanzas.
xmpp.on("online", (address) => {
console.log("online as", address.toString());
});
offline
Emitted when the connection is closed an no further attempt to reconnect will happen, after calling xmpp.stop().
xmpp.on("offline", () => {
console.log("offline");
});
Starts the connection. Attempts to reconnect will automatically happen if it cannot connect or gets disconnected.
xmpp.start().catch(console.error);
xmpp.on("online", (address) => {
console.log("online", address.toString());
});
Returns a promise that resolves if the first attempt succeed or rejects if the first attempt fails.
Stops the connection and prevent any further auto reconnect/retry.
xmpp.stop().catch(console.error);
xmpp.on("offline", () => {
console.log("offline");
});
Returns a promise that resolves once the stream closes and the socket disconnects.
Sends a stanza.
xmpp.send(xml("presence")).catch(console.error);
Returns a promise that resolves once the stanza is serialized and written to the socket or rejects if any of those fails.
Sends multiple stanzas.
Here is an example sending the same text message to multiple recipients.
const message = "Hello";
const recipients = ["romeo@example.com", "juliet@example.com"];
const stanzas = recipients.map((address) =>
xml("message", { to: address, type: "chat" }, xml("body", null, message)),
);
xmpp.sendMany(stanzas).catch(console.error);
Returns a promise that resolves once all the stanzas have been sent.
If you need to send a stanza to multiple recipients we recommend using Extended Stanza Addressing instead.
See @xmpp/reconnect.
XMPP supports multiple transports, this table list @xmpp/client
supported and unsupported transport for each environment.
transport | protocols | Node.js | Browser | React Native |
---|---|---|---|---|
WebSocket | ws(s):// | ✔ | ✔ | ✔ |
TCP | xmpp:// | ✔ | ✗ | ✗ |
TLS | xmpps:// | ✔ | ✗ | ✗ |
Multiple authentication mechanisms are supported.
PLAIN should only be used over secure WebSocket (wss://)
, direct TLS (xmpps:
) or a TCP (xmpp:
) connection upgraded to TLS via STARTTLS
SASL | Node.js | Browser | React Native |
---|---|---|---|
ANONYMOUS | ✔ | ✔ | ✔ |
PLAIN | ✔ | ✔ | ✔ |
SCRAM-SHA-1 | ✔ | ☐ | ✗ |
If you are using an older React Native version, please require/import @xmpp/client/reat-native
instead of @xmpp/client
.
FAQs
An XMPP client is an entity that connects to an XMPP server.
The npm package @xmpp/client receives a total of 3,768 weekly downloads. As such, @xmpp/client popularity was classified as popular.
We found that @xmpp/client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.