1fe9c105aa
refactor(mgmt): smplify the node_query/cluster_query implementation
2022-11-24 20:14:33 +01:00
08121e7df6
fix(mgmt): optimize the speed of query tail pages
...
In the previous, when you query the tail pages, all the front of rows
will be queried out and formatted. It greatly hurts the speed of query.
Currently, we only format the final result rows. i.e, the query for the
last page of data will be 10x faster.
2022-11-24 20:14:33 +01:00
c940b901f5
chore: fix app versions
2022-11-16 16:26:43 +01:00
09455edae8
Merge tag 'v5.0.10' into dev/ee5.0
2022-11-16 16:20:30 +01:00
c079760b0a
fix(JWT): make the `exp` to be optional claim
2022-11-15 15:41:01 +08:00
467010e3d3
chore: bump emqx_authz app vsn
2022-11-08 17:40:34 +01:00
0678e05e84
style: fix message returned for 404
...
Co-authored-by: Zaiming (Stone) Shi <zmstone@gmail.com>
2022-11-08 17:40:34 +01:00
ba1e19f068
fix(emqx_authz_api_sources): make schema fit to what we send
2022-11-08 17:40:34 +01:00
e0ed0855ff
fix(emqx_authz_api_sources): return 'code' in response body for 404
2022-11-08 17:40:34 +01:00
c157392452
docs: fix self-closing html tag, change </br> to <br/>
2022-10-27 13:57:18 +02:00
bb6c3ed4ae
docs: fix more zh translation desc
2022-10-27 08:39:58 +02:00
a314950be9
docs: fix zh punctuations
2022-10-26 16:19:38 +02:00
4135910b42
chore: merge master into dev/ee5.0
2022-09-26 09:52:33 +08:00
2984397e73
chore: apps vsn bump
2022-09-23 17:09:15 +08:00
85835256f1
Merge tag 'v5.0.8' into merge-release-v5.0.8-into-master
2022-09-23 16:06:44 +08:00
c11afc357e
fix(auth): use empty strings for absent placeholder values
2022-09-20 15:20:55 +03:00
c20ad3733a
fix: check for authorization on topic before publishing last will testament
...
fixes #8978
Without checking for authorization, a client can, on abnormal
termination, publish a message to any topic, including `$SYS` ones.
2022-09-16 17:31:22 -03:00
dca522d7d3
test: add tests for publishing lwt when deny_action is disconnect
2022-09-16 15:11:54 -03:00
14b5977996
feat(authz): Support `cert_common_name` and `cert_subject` in Authz
2022-09-15 18:02:54 +08:00
d9c9a1dec3
Merge pull request #8958 from JimMoen/fix-ssl-drop-invalid-certs
...
fix(bridge/authz/exhook): no need to drop invalid certs
2022-09-15 09:01:08 +08:00
a461375b30
chore: support strip double quote in authn/authz
...
more compatibility for https://github.com/emqx/emqx/pull/8827
2022-09-14 15:25:31 +08:00
f018b8ab49
fix(bridge/authz/exhook): no need to drop invalid certs
2022-09-14 14:08:55 +08:00
befc4acced
Merge remote-tracking branch 'origin/master' into merge-master-to-ee50-a
2022-09-06 20:31:38 +02:00
f785da075b
ci: only start required docker for integration tests
2022-09-06 19:25:53 +02:00
dac178cbaf
chore: ensure version bumps
2022-08-31 17:23:47 +02:00
05bbadc8c5
chore: bump ahutz version && update CHANGES-5.0.md
2022-08-31 21:15:55 +08:00
71aaf5c538
fix(authz): fix dialyzer && test case && proper error
2022-08-31 16:49:27 +08:00
168f44e45b
fix: exhook client.authorize never be execauted
...
see: https://github.com/emqx/emqx/issues/8779
2022-08-31 14:34:02 +08:00
1ff53ee8a9
fix(authz): don't stop emqx_resource app in test cases
2022-08-23 08:57:12 +08:00
45352206a3
fix(auth): remove emqx_connector from testcases of authz/authn
2022-08-22 20:20:45 +08:00
b3162fe5ff
fix: conflicts between master and ee5.0
2022-08-14 22:24:09 +08:00
0cdf4b47f1
feat: add more resource creation opts
2022-08-12 13:47:45 +08:00
64aa30ec63
chore(authn/authz): better handling of placeholder interpolation errors
2022-08-10 18:22:37 +03:00
35fe70b887
feat: support aysnc callback to connector modules
2022-08-10 00:34:35 +08:00
d3950b9534
fix(resource): make option 'queue_enabled' disabled by default
2022-08-10 00:34:35 +08:00
0377d3cf61
fix: update existing testcases for new emqx_resource
2022-08-10 00:34:35 +08:00
dd59c850e0
chore: make sure swagger's tags always titlecase
2022-07-25 16:09:17 +08:00
a12478225a
fix: fix bad swagger format
2022-07-20 16:56:07 +08:00
e49686a276
fix(authz): should apply no rule on superuser
2022-07-08 22:35:15 +02:00
4c17b38102
chore: treat 200/204 as acl nomatch
2022-07-01 20:42:22 +08:00
83f5da8f9d
fix(authz-http): fix https://github.com/emqx/emqx/pull/8377#discussion_r911743360
2022-07-01 17:46:55 +08:00
52b77b570f
refactor: authz-http return body to reject pub/sub
2022-07-01 17:46:55 +08:00
8f429b5ea3
Merge pull request #8316 from zmstone/0624-chore-add-a-note-in-authz-config
...
docs: refine authz file path doc
2022-07-01 16:56:27 +08:00
c32a416a2a
Merge pull request #8371 from HJianBo/auto-retry-auth-resource
...
AuthN/Z: automaticly re-connect to disconnected resources
2022-07-01 14:32:50 +08:00
eac21e5b0a
chore: make spellcheck happy
2022-07-01 12:10:37 +08:00
c3ffdef872
docs: Update apps/emqx_authz/i18n/emqx_authz_schema_i18n.conf
...
Co-authored-by: JianBo He <heeejianbo@163.com>
2022-07-01 12:10:36 +08:00
fd86e8bf0b
docs: Update apps/emqx_authz/i18n/emqx_authz_schema_i18n.conf
...
Co-authored-by: JianBo He <heeejianbo@163.com>
2022-07-01 12:10:36 +08:00
3963856480
docs: Update apps/emqx_authz/i18n/emqx_authz_schema_i18n.conf
...
Co-authored-by: JianBo He <heeejianbo@163.com>
2022-07-01 12:10:36 +08:00
5ac9e9f824
docs: refine authz file path doc
2022-07-01 12:10:36 +08:00
f8c90452cc
chore: auto retry disconnected authn/authz resources
2022-07-01 12:01:39 +08:00
95706cf45f
chore: update authz default config style
2022-06-30 08:09:38 +02:00
a9ec193ef8
fix(prometheus): Disable authorization for metrics scraping endpoint
2022-06-23 00:31:53 +02:00
51efe22e57
chore: update the appup files for authz/authn
2022-06-22 15:54:37 +08:00
defacb97df
fix: disabled resources for authz/authn started after emqx reboot
2022-06-22 14:34:30 +08:00
3b00b16abe
Merge pull request #8221 from terry-xiaoyu/fix_delayed_module_disbled_after_emqx_stop
...
feat: fix the hook priorities
2022-06-16 09:42:42 +08:00
39b1b20506
feat: fix the hook priorities
2022-06-15 19:03:40 +08:00
03967a83de
chore(authz): make `authorization.cache.enable` required
2022-06-15 13:46:17 +08:00
45aa9d604b
fix(metrics): remove the client. prefix for AuthN/AuthZ metrics
2022-06-14 14:08:25 +08:00
f18eab402a
fix(CI): don't use any authz sources when testing
2022-06-10 14:21:20 +08:00
f159e081fa
fix: deny all subscribes to '#' topics in the default acl.conf
2022-06-10 14:21:20 +08:00
86a3ac0bef
fix(authz): prohibit overriding of existing client/user
2022-06-07 16:34:01 +08:00
91000eb342
fix: authz ct failed
2022-06-06 10:57:26 +08:00
c7cc2e85b2
fix: add default&example for schema
2022-06-06 09:52:10 +08:00
9ec804ae03
feat: generate example.conf from schemas
2022-05-31 19:20:27 +08:00
8aa60cc0a5
feat: generate a minimized emqx.conf
2022-05-31 19:20:27 +08:00
2eb621ba57
fix: hint metrics merge errors
2022-05-13 21:38:51 +02:00
91da451803
feat(authz): add default authn-based authz source
2022-05-13 12:51:10 +03:00
ca0c80965a
Merge pull request #7890 from savonarola/fix-jwt-acl-v5
...
fix(jwt auth): improve JWT handling
2022-05-12 19:48:37 +03:00
e0fa07b679
fix(jwt auth): improve JWT handling
2022-05-12 12:10:47 +03:00
87af77ec35
refactor: do not destory resource when update authn/authz resource
2022-05-12 14:19:57 +08:00
5220869dd8
fix(authz): add authz source type into the authorize logger
2022-05-11 17:54:42 +08:00
841acb7828
Merge pull request #7783 from emqx/EMQX-4199-introduce-a-new-emqx-resource-manager-module
...
feat: isolate resource manager processes
2022-05-09 18:33:01 +02:00
0b3e30e813
feat: isolate resource manager processes
2022-05-09 13:24:34 +02:00
30b3060327
fix: improve authn, authz metrics
2022-05-05 18:53:31 +08:00
d36d27c533
Merge pull request #7781 from HJianBo/rename-acl-metrics
...
feat(metrics): refactor authz metrics name
2022-04-29 16:52:43 +08:00
344a754674
Merge pull request #7817 from JimMoen/fix-auth-http
2022-04-29 16:36:10 +08:00
1632df9ebb
Merge pull request #7837 from EMQ-YangM/reduce_duplicate_field
...
fix: reduce duplicate field
2022-04-29 15:50:27 +08:00
7bbed713f4
Merge pull request #7835 from JimMoen/fix-mongo-require-fields
...
fix(auth): mongo field `filter` not required and have default value
2022-04-29 15:38:54 +08:00
4989ce7a0d
test(authz-jwt): fix flaky test t_check_expire
2022-04-29 15:20:05 +08:00
1597ea50c1
feat(metrics): refactor authz metrics name
...
In the current implementation:
```
Authz checking times = client.authorize + client.authorization.cache_hit
= client.authorization.allow + client.authorization.deny
client.authorize means how many times the `client.authorize` hook has been executed.
client.authorize = client.authorization.matched.allow +
client.authorization.matched.deny +
client.authorization.nomatch
```
2022-04-29 15:20:05 +08:00
110f0d0e94
fix: reduce duplicate field
2022-04-29 14:37:49 +08:00
ad4b70c27e
fix(auth): mongo field `filter` not required and have default value
2022-04-29 13:37:29 +08:00
5f75f6e3be
docs: refine auth http i18n description
2022-04-29 12:48:21 +08:00
c1dfd0aa36
test(auth): authn & authz http placeholder in HTTP path
2022-04-29 12:48:17 +08:00
15ef9892c5
fix(auth): authn & authz http support placeholder in HTTP path
2022-04-29 12:48:00 +08:00
dae418ae4a
fix(auth): authn & authz http not required `body` field
2022-04-29 12:47:56 +08:00
e4826400b8
fix(auth): authn & authz HTTP haeders without `content-type` via GET method
2022-04-29 12:47:52 +08:00
4a6dabbe57
fix: rename to emqx_metrics_worker
2022-04-29 12:41:36 +08:00
7061d94cf9
Merge pull request #7823 from EMQ-YangM/authz_add_metrics
...
feat: new authz metrics
2022-04-29 11:27:59 +08:00
3fa8447c85
fix: fix static check warning, add some fields schema
2022-04-29 10:32:52 +08:00
712cdb3152
fix: fix static check error
2022-04-29 09:11:06 +08:00
6879df9c5c
fix: respect atom name convention
2022-04-29 08:59:51 +08:00
3e314f6785
fix: rewrite status_metrics_example
2022-04-29 00:44:22 +08:00
f91a6b9f00
fix: authz add metrics_and_status schema
2022-04-29 00:37:21 +08:00
a6920ac11b
feat: new authz metrics
2022-04-28 22:01:40 +08:00
bd0d0d9797
Merge branch 'master' into chore/authn-fields
2022-04-28 16:09:26 +08:00
46e993fa81
Merge pull request #7786 from terry-xiaoyu/save_tls_files_for_bridges
...
Save tls files for bridges
2022-04-27 21:48:18 +08:00
eb39a8476f
Merge pull request #7769 from HJianBo/zh-for-jwt
...
chore(i18n): translate jwt fields to zh
2022-04-27 17:49:51 +08:00
46550d5a6f
fix: don't remote the cert files when updating authz
2022-04-27 14:07:33 +08:00
7ddd020dd2
docs: improve desc for filter field
2022-04-27 11:29:18 +08:00
fa9bd74595
chore: rename selector to filter and fix spellcheck
2022-04-27 11:29:18 +08:00
a75f42d629
docs: add missing i18n trans and make spellcheck happy
2022-04-27 11:00:22 +08:00
3858c2353a
chore(i18n): translate jwt fields to zh
2022-04-26 21:48:55 +08:00
9f35dd7f80
Merge pull request #7730 from savonarola/jwt-authz
...
feat(emqx_auth_jwt): use JWT for ACL checks
2022-04-26 14:18:50 +08:00
a4feb3e6e9
style: reformat emqx_auto_subscribe and emqx_conf
2022-04-25 18:05:10 +02:00
fc2ea9e484
feat(emqx_auth_jwt): use JWT for ACL checks
2022-04-25 11:59:04 +03:00
2d553d711f
fix: 'ComFun' missing parameter
2022-04-25 11:38:48 +08:00
e9843aa225
fix(doc): html line break use `</br>`
2022-04-24 18:56:21 +08:00
14e0296221
Merge pull request #7728 from zhongwencool/fix-swagger
...
fix: swagger crash/ copy conf failed from core node
2022-04-22 20:49:21 +08:00
1fab779db8
fix(i18n): rm double quotes in i18n confs, add missing translation
2022-04-22 19:26:44 +08:00
3de0d71d00
fix: swagger crash
2022-04-22 17:25:53 +08:00
4a43a10296
Merge pull request #7701 from EMQ-YangM/improve_docs
...
fix: improve document quality
2022-04-22 16:52:09 +08:00
625223c2b5
test: fix redis_type
2022-04-22 11:07:50 +08:00
11d2ae117c
docs: authz i18n zh_CN support
2022-04-22 10:40:34 +08:00
4b7a5bbf53
fix: bad empty map
2022-04-21 21:26:35 +08:00
5d9df74be7
test: fix required fields
2022-04-21 18:47:02 +08:00
75f612a449
fix: bad SUITE & bad code
2022-04-21 18:30:51 +08:00
7417e5070d
fix: perpare sql when connector doing init; add prepare statement field; bad log path
2022-04-21 16:00:15 +08:00
2aedd38a43
fix: authz mysql prepare query
2022-04-21 16:00:15 +08:00
039619ee23
feat: authz & authn mysql resource support prepare sql query
2022-04-21 16:00:15 +08:00
341973880d
fix(authz): refine authz-http api with default headers
2022-04-19 18:57:01 +08:00
14a97d777d
fix(authz): api required fields
2022-04-19 18:57:01 +08:00
93dd7d46c5
refactor: fields `meta` ref to dashboard_swagger
2022-04-19 18:57:01 +08:00
dccb1df3eb
test: fix cert file match
2022-04-19 09:47:18 +02:00
c71302ae27
refactor(ssl): show file paths for SSL certs in dashboard
2022-04-19 08:43:37 +02:00
9e4b9c6689
refactor: mgmt rm `generate_response/1`
2022-04-19 01:20:57 +08:00
c89c00aed0
test: clean cache api for all clients or specific client
2022-04-18 16:47:52 +08:00
6da1302acd
feat: clean up all authz cache api
2022-04-18 16:46:13 +08:00
8df76da9ac
chore(formatting): Fix formatting of modules, authz and authn
2022-04-05 11:01:53 +02:00
99b3f2f83e
docs(schema): Document missing records and fields
2022-04-04 23:58:43 +02:00
c0d2243e72
refactor(telemetry): move authn/authz info fns to their own apps
2022-04-01 09:27:52 -03:00
5c069319a7
fix(authz): make `acl_conf_file` mockable
2022-04-01 09:23:42 -03:00
acb3544d4b
style(authz): reformat authz subdir source files
2022-04-01 09:55:47 +08:00
82559b9b08
style: erlfmt apps/emqx_authz
2022-04-01 02:19:46 +08:00
989f0a7c2c
Merge pull request #7449 from JimMoen/rm-authz-dry-run
...
fix(authz): rm authz source update dry_run
2022-03-31 18:15:08 +08:00
a6031d6695
Merge pull request #7464 from savonarola/emqx_topic_metrics_api-cov
...
chore(emqx_modules): add emqx_topic_metrics_api tests
2022-03-31 11:27:58 +03:00
4746204f6f
fix(authz): rm authz source update dry_run
2022-03-31 10:34:33 +08:00
0728b1e3f4
chore(emqx_modules): add emqx_topic_metrics_api tests
2022-03-30 21:18:27 +03:00
b6d93e91e6
docs(schema): Document fields for HTTP auth
2022-03-30 13:05:56 +02:00
edb91e2e4a
docs(schema): Add descriptions for authZ and connector
2022-03-30 13:01:01 +02:00
4791c64b73
feat: add rule event 'client.check_authz_complete'
2022-03-29 11:24:36 +08:00
d20388cf01
test(authz): acl file rules update
2022-03-23 21:14:43 +08:00
fc687bed27
test(authz): authz mnesia suite json body
2022-03-23 21:14:43 +08:00
41c808a262
fix(authz): write acl and cert files after nodes config synced
2022-03-23 21:14:43 +08:00
c2e1c38fdf
refactor(authz): prepend and append only allow one source
2022-03-23 21:14:43 +08:00
843e12ad16
refactor(authz): unifined function names and var names
2022-03-23 21:14:43 +08:00
9820728e5c
Merge pull request #7351 from JimMoen/fix-authz-api-pem-check
...
fix authz api flaky status code.
2022-03-21 20:55:36 +08:00
3769044a57
fix(authz_api): ssl pem check failed returns 400
2022-03-21 18:05:43 +08:00
1ed8e783f4
fix(authz_api): rm authz sources full update
2022-03-21 16:43:08 +08:00
0b7f1ab69c
refactor(authz_api): avoid copy paste
2022-03-21 16:43:08 +08:00
JianBo He