Feature Request: authenticate username with jwt

Question

Feature Request: authenticate username with jwt

aruldd opened this issue 6 years ago · comments

Currently, the jwt lets the user access all the topics since the username is not a criterion.
It will help if we can isolate the topics accessible too.

Rajiv commented 6 years ago

+1

Gilbert · Answer 1 · Sat Oct 27 2018 11:20:21 GMT+0800 (China Standard Time)

I suppose that the feature you want is acl, this acl could be configured in acl.conf in emqx/etc. this plugin is just for authentification not acl.

Rajiv · Answer 2 · Sat Oct 27 2018 22:39:37 GMT+0800 (China Standard Time)

The thing here is that if I have a valid JWT token, and if I know another username than my own, I can use this JWT to authenticate as the other user (any user actually, just need one valid JWT)