[jdev] JIDs in chat rooms (Avatar and other user info)

[Tijl Houtbeckers]

On Mon, 27 Sep 2004 13:20:45 +0200, Matthias Wimmer <m at tthias.net> wrote:

> Hi Heiner!
>
> Heiner Wolf schrieb am 2004-09-27 13:03:00:
>> Any ideas?
>
> What about sending a pubsub node address in the presence you sent to the
> room?

Clients can pick their own pubsub server, so they could specify one that  
tells them who requested the avatars. That would tell them the JIDs of the  
others in the room. Also the name of the node on a PubSub server sometimes  
shows the JID of the publisher (this is not required, but used many times  
in examples concerning PubSub and is never mentioned as a security  
consideration).

The only real safe way to do it is by letting the MUC component retrieve  
the avatars of users, and make them available for publishing (whether this  
is done by a minimal PubSub implementation in the MUC component, an  
external PubSub server or JEP-0008 style is up to the implementor).

Wether clients will allow entities not on their roster (like the MUC  
component, or a user in the MUC room like Matthias suggests) to retrieve  
their avatar is up to them with PubSub. Though in the current JEP-0008 (I  
believe) model they don't have that choice (when you know the JID you can  
always get the avatar).