SASL/PLAIN

The SASL mechanism that sends a username and password as they are.

Because the password crosses the network, it is only safe over TLS. The broker checks it against credentials in its own configuration or a callback.