64aa30ec63
chore(authn/authz): better handling of placeholder interpolation errors
2022-08-10 18:22:37 +03:00
35fe70b887
feat: support aysnc callback to connector modules
2022-08-10 00:34:35 +08:00
d3950b9534
fix(resource): make option 'queue_enabled' disabled by default
2022-08-10 00:34:35 +08:00
0377d3cf61
fix: update existing testcases for new emqx_resource
2022-08-10 00:34:35 +08:00
dd59c850e0
chore: make sure swagger's tags always titlecase
2022-07-25 16:09:17 +08:00
a12478225a
fix: fix bad swagger format
2022-07-20 16:56:07 +08:00
e49686a276
fix(authz): should apply no rule on superuser
2022-07-08 22:35:15 +02:00
4c17b38102
chore: treat 200/204 as acl nomatch
2022-07-01 20:42:22 +08:00
83f5da8f9d
fix(authz-http): fix https://github.com/emqx/emqx/pull/8377#discussion_r911743360
2022-07-01 17:46:55 +08:00
52b77b570f
refactor: authz-http return body to reject pub/sub
2022-07-01 17:46:55 +08:00
8f429b5ea3
Merge pull request #8316 from zmstone/0624-chore-add-a-note-in-authz-config
...
docs: refine authz file path doc
2022-07-01 16:56:27 +08:00
c32a416a2a
Merge pull request #8371 from HJianBo/auto-retry-auth-resource
...
AuthN/Z: automaticly re-connect to disconnected resources
2022-07-01 14:32:50 +08:00
eac21e5b0a
chore: make spellcheck happy
2022-07-01 12:10:37 +08:00
c3ffdef872
docs: Update apps/emqx_authz/i18n/emqx_authz_schema_i18n.conf
...
Co-authored-by: JianBo He <heeejianbo@163.com>
2022-07-01 12:10:36 +08:00
fd86e8bf0b
docs: Update apps/emqx_authz/i18n/emqx_authz_schema_i18n.conf
...
Co-authored-by: JianBo He <heeejianbo@163.com>
2022-07-01 12:10:36 +08:00
3963856480
docs: Update apps/emqx_authz/i18n/emqx_authz_schema_i18n.conf
...
Co-authored-by: JianBo He <heeejianbo@163.com>
2022-07-01 12:10:36 +08:00
5ac9e9f824
docs: refine authz file path doc
2022-07-01 12:10:36 +08:00
f8c90452cc
chore: auto retry disconnected authn/authz resources
2022-07-01 12:01:39 +08:00
95706cf45f
chore: update authz default config style
2022-06-30 08:09:38 +02:00
a9ec193ef8
fix(prometheus): Disable authorization for metrics scraping endpoint
2022-06-23 00:31:53 +02:00
51efe22e57
chore: update the appup files for authz/authn
2022-06-22 15:54:37 +08:00
defacb97df
fix: disabled resources for authz/authn started after emqx reboot
2022-06-22 14:34:30 +08:00
3b00b16abe
Merge pull request #8221 from terry-xiaoyu/fix_delayed_module_disbled_after_emqx_stop
...
feat: fix the hook priorities
2022-06-16 09:42:42 +08:00
39b1b20506
feat: fix the hook priorities
2022-06-15 19:03:40 +08:00
03967a83de
chore(authz): make `authorization.cache.enable` required
2022-06-15 13:46:17 +08:00
45aa9d604b
fix(metrics): remove the client. prefix for AuthN/AuthZ metrics
2022-06-14 14:08:25 +08:00
f18eab402a
fix(CI): don't use any authz sources when testing
2022-06-10 14:21:20 +08:00
f159e081fa
fix: deny all subscribes to '#' topics in the default acl.conf
2022-06-10 14:21:20 +08:00
86a3ac0bef
fix(authz): prohibit overriding of existing client/user
2022-06-07 16:34:01 +08:00
91000eb342
fix: authz ct failed
2022-06-06 10:57:26 +08:00
c7cc2e85b2
fix: add default&example for schema
2022-06-06 09:52:10 +08:00
9ec804ae03
feat: generate example.conf from schemas
2022-05-31 19:20:27 +08:00
8aa60cc0a5
feat: generate a minimized emqx.conf
2022-05-31 19:20:27 +08:00
2eb621ba57
fix: hint metrics merge errors
2022-05-13 21:38:51 +02:00
91da451803
feat(authz): add default authn-based authz source
2022-05-13 12:51:10 +03:00
ca0c80965a
Merge pull request #7890 from savonarola/fix-jwt-acl-v5
...
fix(jwt auth): improve JWT handling
2022-05-12 19:48:37 +03:00
e0fa07b679
fix(jwt auth): improve JWT handling
2022-05-12 12:10:47 +03:00
87af77ec35
refactor: do not destory resource when update authn/authz resource
2022-05-12 14:19:57 +08:00
5220869dd8
fix(authz): add authz source type into the authorize logger
2022-05-11 17:54:42 +08:00
841acb7828
Merge pull request #7783 from emqx/EMQX-4199-introduce-a-new-emqx-resource-manager-module
...
feat: isolate resource manager processes
2022-05-09 18:33:01 +02:00
0b3e30e813
feat: isolate resource manager processes
2022-05-09 13:24:34 +02:00
30b3060327
fix: improve authn, authz metrics
2022-05-05 18:53:31 +08:00
d36d27c533
Merge pull request #7781 from HJianBo/rename-acl-metrics
...
feat(metrics): refactor authz metrics name
2022-04-29 16:52:43 +08:00
344a754674
Merge pull request #7817 from JimMoen/fix-auth-http
2022-04-29 16:36:10 +08:00
1632df9ebb
Merge pull request #7837 from EMQ-YangM/reduce_duplicate_field
...
fix: reduce duplicate field
2022-04-29 15:50:27 +08:00
7bbed713f4
Merge pull request #7835 from JimMoen/fix-mongo-require-fields
...
fix(auth): mongo field `filter` not required and have default value
2022-04-29 15:38:54 +08:00
4989ce7a0d
test(authz-jwt): fix flaky test t_check_expire
2022-04-29 15:20:05 +08:00
1597ea50c1
feat(metrics): refactor authz metrics name
...
In the current implementation:
```
Authz checking times = client.authorize + client.authorization.cache_hit
= client.authorization.allow + client.authorization.deny
client.authorize means how many times the `client.authorize` hook has been executed.
client.authorize = client.authorization.matched.allow +
client.authorization.matched.deny +
client.authorization.nomatch
```
2022-04-29 15:20:05 +08:00
110f0d0e94
fix: reduce duplicate field
2022-04-29 14:37:49 +08:00
ad4b70c27e
fix(auth): mongo field `filter` not required and have default value
2022-04-29 13:37:29 +08:00
5f75f6e3be
docs: refine auth http i18n description
2022-04-29 12:48:21 +08:00
c1dfd0aa36
test(auth): authn & authz http placeholder in HTTP path
2022-04-29 12:48:17 +08:00
15ef9892c5
fix(auth): authn & authz http support placeholder in HTTP path
2022-04-29 12:48:00 +08:00
dae418ae4a
fix(auth): authn & authz http not required `body` field
2022-04-29 12:47:56 +08:00
e4826400b8
fix(auth): authn & authz HTTP haeders without `content-type` via GET method
2022-04-29 12:47:52 +08:00
4a6dabbe57
fix: rename to emqx_metrics_worker
2022-04-29 12:41:36 +08:00
7061d94cf9
Merge pull request #7823 from EMQ-YangM/authz_add_metrics
...
feat: new authz metrics
2022-04-29 11:27:59 +08:00
3fa8447c85
fix: fix static check warning, add some fields schema
2022-04-29 10:32:52 +08:00
712cdb3152
fix: fix static check error
2022-04-29 09:11:06 +08:00
6879df9c5c
fix: respect atom name convention
2022-04-29 08:59:51 +08:00
3e314f6785
fix: rewrite status_metrics_example
2022-04-29 00:44:22 +08:00
f91a6b9f00
fix: authz add metrics_and_status schema
2022-04-29 00:37:21 +08:00
a6920ac11b
feat: new authz metrics
2022-04-28 22:01:40 +08:00
bd0d0d9797
Merge branch 'master' into chore/authn-fields
2022-04-28 16:09:26 +08:00
46e993fa81
Merge pull request #7786 from terry-xiaoyu/save_tls_files_for_bridges
...
Save tls files for bridges
2022-04-27 21:48:18 +08:00
eb39a8476f
Merge pull request #7769 from HJianBo/zh-for-jwt
...
chore(i18n): translate jwt fields to zh
2022-04-27 17:49:51 +08:00
46550d5a6f
fix: don't remote the cert files when updating authz
2022-04-27 14:07:33 +08:00
7ddd020dd2
docs: improve desc for filter field
2022-04-27 11:29:18 +08:00
fa9bd74595
chore: rename selector to filter and fix spellcheck
2022-04-27 11:29:18 +08:00
a75f42d629
docs: add missing i18n trans and make spellcheck happy
2022-04-27 11:00:22 +08:00
3858c2353a
chore(i18n): translate jwt fields to zh
2022-04-26 21:48:55 +08:00
9f35dd7f80
Merge pull request #7730 from savonarola/jwt-authz
...
feat(emqx_auth_jwt): use JWT for ACL checks
2022-04-26 14:18:50 +08:00
a4feb3e6e9
style: reformat emqx_auto_subscribe and emqx_conf
2022-04-25 18:05:10 +02:00
fc2ea9e484
feat(emqx_auth_jwt): use JWT for ACL checks
2022-04-25 11:59:04 +03:00
2d553d711f
fix: 'ComFun' missing parameter
2022-04-25 11:38:48 +08:00
e9843aa225
fix(doc): html line break use `</br>`
2022-04-24 18:56:21 +08:00
14e0296221
Merge pull request #7728 from zhongwencool/fix-swagger
...
fix: swagger crash/ copy conf failed from core node
2022-04-22 20:49:21 +08:00
1fab779db8
fix(i18n): rm double quotes in i18n confs, add missing translation
2022-04-22 19:26:44 +08:00
3de0d71d00
fix: swagger crash
2022-04-22 17:25:53 +08:00
4a43a10296
Merge pull request #7701 from EMQ-YangM/improve_docs
...
fix: improve document quality
2022-04-22 16:52:09 +08:00
625223c2b5
test: fix redis_type
2022-04-22 11:07:50 +08:00
11d2ae117c
docs: authz i18n zh_CN support
2022-04-22 10:40:34 +08:00
4b7a5bbf53
fix: bad empty map
2022-04-21 21:26:35 +08:00
5d9df74be7
test: fix required fields
2022-04-21 18:47:02 +08:00
75f612a449
fix: bad SUITE & bad code
2022-04-21 18:30:51 +08:00
7417e5070d
fix: perpare sql when connector doing init; add prepare statement field; bad log path
2022-04-21 16:00:15 +08:00
2aedd38a43
fix: authz mysql prepare query
2022-04-21 16:00:15 +08:00
039619ee23
feat: authz & authn mysql resource support prepare sql query
2022-04-21 16:00:15 +08:00
341973880d
fix(authz): refine authz-http api with default headers
2022-04-19 18:57:01 +08:00
14a97d777d
fix(authz): api required fields
2022-04-19 18:57:01 +08:00
93dd7d46c5
refactor: fields `meta` ref to dashboard_swagger
2022-04-19 18:57:01 +08:00
dccb1df3eb
test: fix cert file match
2022-04-19 09:47:18 +02:00
c71302ae27
refactor(ssl): show file paths for SSL certs in dashboard
2022-04-19 08:43:37 +02:00
9e4b9c6689
refactor: mgmt rm `generate_response/1`
2022-04-19 01:20:57 +08:00
c89c00aed0
test: clean cache api for all clients or specific client
2022-04-18 16:47:52 +08:00
6da1302acd
feat: clean up all authz cache api
2022-04-18 16:46:13 +08:00
8df76da9ac
chore(formatting): Fix formatting of modules, authz and authn
2022-04-05 11:01:53 +02:00
99b3f2f83e
docs(schema): Document missing records and fields
2022-04-04 23:58:43 +02:00
c0d2243e72
refactor(telemetry): move authn/authz info fns to their own apps
2022-04-01 09:27:52 -03:00
5c069319a7
fix(authz): make `acl_conf_file` mockable
2022-04-01 09:23:42 -03:00
acb3544d4b
style(authz): reformat authz subdir source files
2022-04-01 09:55:47 +08:00
82559b9b08
style: erlfmt apps/emqx_authz
2022-04-01 02:19:46 +08:00
989f0a7c2c
Merge pull request #7449 from JimMoen/rm-authz-dry-run
...
fix(authz): rm authz source update dry_run
2022-03-31 18:15:08 +08:00
a6031d6695
Merge pull request #7464 from savonarola/emqx_topic_metrics_api-cov
...
chore(emqx_modules): add emqx_topic_metrics_api tests
2022-03-31 11:27:58 +03:00
4746204f6f
fix(authz): rm authz source update dry_run
2022-03-31 10:34:33 +08:00
0728b1e3f4
chore(emqx_modules): add emqx_topic_metrics_api tests
2022-03-30 21:18:27 +03:00
b6d93e91e6
docs(schema): Document fields for HTTP auth
2022-03-30 13:05:56 +02:00
edb91e2e4a
docs(schema): Add descriptions for authZ and connector
2022-03-30 13:01:01 +02:00
4791c64b73
feat: add rule event 'client.check_authz_complete'
2022-03-29 11:24:36 +08:00
d20388cf01
test(authz): acl file rules update
2022-03-23 21:14:43 +08:00
fc687bed27
test(authz): authz mnesia suite json body
2022-03-23 21:14:43 +08:00
41c808a262
fix(authz): write acl and cert files after nodes config synced
2022-03-23 21:14:43 +08:00
c2e1c38fdf
refactor(authz): prepend and append only allow one source
2022-03-23 21:14:43 +08:00
843e12ad16
refactor(authz): unifined function names and var names
2022-03-23 21:14:43 +08:00
9820728e5c
Merge pull request #7351 from JimMoen/fix-authz-api-pem-check
...
fix authz api flaky status code.
2022-03-21 20:55:36 +08:00
3769044a57
fix(authz_api): ssl pem check failed returns 400
2022-03-21 18:05:43 +08:00
1ed8e783f4
fix(authz_api): rm authz sources full update
2022-03-21 16:43:08 +08:00
0b7f1ab69c
refactor(authz_api): avoid copy paste
2022-03-21 16:43:08 +08:00
0ee3e49db7
chore: rm unused macro and func, fix unchanged product name
2022-03-21 16:43:08 +08:00
188d876b1c
fix(api): fix unmatched position parsing
2022-03-21 16:43:08 +08:00
dc8408e378
fix(emqx_authz_api): fix error code
2022-03-21 14:42:09 +08:00
a34e750ebe
fix: unify http response code for auhtn & authz
2022-03-21 14:16:52 +08:00
d1857ba454
feat: add authn, authz status api
2022-03-18 14:36:33 +08:00
37c4d68f40
fix: ignore authn, authz status and metrics
2022-03-16 11:14:21 +08:00
eb5570dd07
fix: disable authn_api, authz_api_sources swagger spec
2022-03-16 10:16:50 +08:00
02ed2148d7
refactor: move api `top` -> `front`, `bottom` -> `rear`
2022-03-15 10:28:46 +08:00
f6ee45b2e6
test(authz_api): authz sources move api style
2022-03-15 10:28:46 +08:00
68c473c7cc
refactor(authz_api): authz sources move api style
2022-03-15 10:28:46 +08:00
258d2e9e03
fix(emqx_authz_api_sources): use merge replace foldl
2022-03-14 14:43:17 +08:00
740b3870bf
fix(elvis): nesting_level shouldn't exceed 6
2022-03-14 13:36:35 +08:00
b33b3f6eee
fix: reduce status_and_metrics
2022-03-14 10:21:51 +08:00
afc92798a5
fix(emqx_authz_api_sources): fix resource status
2022-03-13 16:01:33 +08:00
f287547251
feat(emqx_authz): add metrics and status to authz
2022-03-13 12:41:03 +08:00
b41e396ed2
test(authz): make sure `emqx_resource` and `emqx_connector` stoped
2022-03-11 19:11:07 +08:00
f5caf66253
refactor(api): unified api name style
2022-03-11 11:07:55 +08:00
bde7e51d8e
test(authz): add `DELETE` method test, change request method for all
2022-03-11 11:07:55 +08:00
5e81a1ae95
fix(authz): `POST` method for creating or updating rules for all
2022-03-11 11:07:55 +08:00
ba05cdc412
fix(authz): `DELETE` method return codes
2022-03-11 11:07:55 +08:00
93c74bd645
Merge pull request #7225 from JimMoen/authn-authz-mnesia-fuzzy-searching
...
authn and authz mnesia searching by `clientid` or `username`
2022-03-10 17:00:36 +08:00
7274d775cb
test(authz): api username fuzzy searching
2022-03-10 13:38:45 +08:00
1d023b541f
refactor(connnector): rename waiting_connect_complete -> wait_for_resource_ready
...
Rename the option to wait_for_resource_ready and defaults to 5s.
2022-03-10 10:46:57 +08:00
16ec8fe289
feat(authz): authz mnesia rules searching by `clientid` or `username`
2022-03-10 10:01:40 +08:00
c01aa3c580
style(authz_mnesia): api spec style, rm duplicated module name
2022-03-10 10:01:40 +08:00
b7674fd19f
fix(emqx_authz_file_SUITE): fix config_update_crashed error
2022-03-09 16:35:30 +08:00
583624fb8d
fix(emqx_authn): fix test suite
2022-03-09 13:53:05 +08:00
db97ed5163
fix(emqx_authz): add default wait_connected
2022-03-08 14:09:39 +08:00
6ff2db6180
fix: elvis warning
2022-03-04 15:10:10 +08:00
e2f386383d
fix: replace local ref by remote ref
2022-03-04 09:13:56 +08:00
db584f79d6
feat: upgrade hocon to 0.25.0 to replace nullable with required.
2022-02-24 22:39:03 +08:00
e816e3e4a3
Merge pull request #7075 from JimMoen/refactor-authz-sources-api
...
refactor: authz_api_sources swagger spec
2022-02-22 01:24:42 +08:00
Ilya Averyanov