db9efb9317
chore: bump apps versions
2024-03-28 10:19:09 +01:00
3136ec5958
feat: allow mountpoint to use client_attrs
2024-03-23 10:16:05 +01:00
0cf61932b6
feat: allow using client_attrs in authentication templates
2024-03-23 10:16:05 +01:00
c75840306b
fix: restrict client_attr key and value string format
...
The keys and values are used to render templates for
authz rules, such as topic names, and SQL statements etc.
2024-03-23 10:16:02 +01:00
9ec99fef4a
feat: allow client_attr used in authz rules
2024-03-23 10:16:02 +01:00
e5816f5a13
refactor: rename attr to client_attr
...
client_attr is unique enough for all contexts
so the name can be unified from external responses
to internal template rendering, and rule-engine template rendering
2024-03-23 10:16:02 +01:00
cc4805b1ac
feat: extract attrs field from http and jwt auth response
2024-03-23 10:16:02 +01:00
46877e979b
chore: update copyright-year
2024-02-23 08:21:06 +01:00
c7bfaf51fd
chore: typo error (templete -> template)
2024-02-20 09:41:09 +08:00
5e100f52b8
style: erlfmt all `rebar.config` files and `bin/nodetool`
2023-12-29 09:08:03 +08:00
322b7bb7d2
chore: bump app vsn
2023-12-22 13:00:37 +01:00
7286f773ba
feat: don't merge authz default headers if user already setting
2023-12-15 09:45:42 +08:00
28a577ad09
chore: bump apps versions
2023-11-14 11:02:26 +01:00
06e440260f
refactor(schema): add args to map alias
2023-11-12 11:29:33 +01:00
f1de0aa176
fix(schema): add namespace to authn schemas
2023-11-10 13:41:51 +01:00
b24b66081a
refactor(authn/authz_http_schema): use typerefl alias
2023-11-10 13:41:51 +01:00
3d20e566d8
docs: add namespace to authn and authz schema
2023-11-10 08:45:20 +01:00
49fba40ee7
fix(tpl): ensure backward compat with authz / authn templates
...
This commit leans heavy into discouraging the former approach where
only part of placeholders were interpolated, depending on `placeholders`
option.
2023-11-02 17:11:10 +07:00
49f5325c67
feat(tpl): unify validations / errors var representations
2023-11-02 17:11:10 +07:00
0538a77700
feat(tpl): use `emqx_connector_template` in `emqx_authn`, `emqx_authz`
...
This slightly changes semantics: now the attempt to create authenticator
with illegal bindings in templates will fail, instead of treating them
as literals. The runtime behaviour on the other hand should be the same.
2023-11-02 17:11:10 +07:00
c2c56ba481
chore(auth): update tests
2023-10-05 13:41:50 +03:00
1eb75b43c4
chore(auth): split emqx_authn and emqx_authz apps
2023-10-05 13:41:50 +03:00
c24f3688c4
build: delete needless auth plugins
2021-06-25 18:45:34 +08:00
31cbb7aa97
Merge branch 'master' of github.com:emqx/emqx into merge-master
2021-05-25 12:50:50 +09:00
f21ef50938
chore: add missing parameter in available variables
2021-05-17 13:15:04 +08:00
0d9a9fc966
Merge branch 'dev/v5.0' into resolve-conflict-master-to-v5.0
2021-05-07 08:43:26 +02:00
f68a89c9ba
fix(auth-http): support content-type header env variable override
2021-05-07 10:14:19 +08:00
d904a1048b
Merge remote-tracking branch 'origin/master' into merge-master-to-dev/v5.0
2021-04-30 15:09:31 +02:00
078ca67268
test(emqx_auth_http): test ipv6 + hostname resolution
2021-04-28 10:43:36 +02:00
a37f47887a
fix(ipv6): add ipv6_probe socket option only when supported
...
ipv6_probe is a socket option supported in EMQ's otp.git fork.
If the target hostname has a ipv6 DNS resolution, gen_tcp
tries to establish a connection on ipv6.
If it fails, then a fallback to default gen_tcp:connection
2021-04-28 10:43:36 +02:00
d9c7c72612
feat(ipv6 probe): automatically probe whether it is IPv6
2021-04-28 10:43:36 +02:00
6354e75626
chore: update copyrights
2021-04-23 20:43:00 +02:00
97f2e5d544
test(auth_http): test unset acl_req app env
2021-04-19 08:39:26 +02:00
8eed34c939
chore(auth_http): fix typo
2021-04-19 08:39:26 +02:00
e02eb5f939
docs(auth_http): Update config doc
2021-04-19 08:39:26 +02:00
9bedd1bb4f
chore(ehttpc): update tag of ehttpc
2021-04-15 21:47:20 +08:00
971e6ca90e
Merge branch 'master' of github.com:emqx/emqx into merge-master-to-v5
2021-04-07 20:29:08 +09:00
f08ddec296
Add server_name_indication and verify option ( #4349 )
...
Add server_name_indication and verify option
2021-03-23 19:48:04 +08:00
6c106207ff
Merge pull request #4293 from emqx/master
...
Auto-pull-request-on-2021-03-05
2021-03-10 20:57:45 +01:00
c752f3bec5
Refactor http lib add uri parse ( #4292 )
...
* feat(http_lib): Add uri parse to emqx_http_lib
* fix(webhook): call emqx_http_lib to parse uri
* fix(auth-http): Call emqx_http_lib to parse uri
* fix(rule-engine): call emqx_http_lib to parse uri
2021-03-06 13:35:02 +08:00
5edef84332
Merge branch 'dev/v5.0' into fix-merge-conflict-master-to-5.0
2021-03-01 19:58:16 +01:00
fb8133b998
chore(emqx_auth_http): match emqx:hook with ok
2021-02-24 21:32:48 +09:00
c2cd2fd231
Merge remote-tracking branch 'origin/dev/v4.3.0' into dev/v5.0
2021-02-19 21:13:33 +01:00
706e272410
chore(emqx_auth_http): fix dialyzer warnings (match returned values)
2021-02-19 16:23:18 +09:00
d11487268e
Merge remote-tracking branch 'origin/dev/v4.3.0' into resolve-conflict-v4.3.0-to-v5.0
2021-02-12 10:36:16 +01:00
f000b6583c
fix(tls): Ensure tls config integrity
...
For default tsl version and ciphers, we try to use otp release number
to determin if we want to use tlsv1.3
For default configs, we try to porivde both tlsv1.3 and
ciphers in config (even for commented out configs)
2021-02-09 22:56:28 +01:00
e8729fb00e
Merge branch 'dev/v5.0' of private:emqx/emqx into merge430
2021-01-29 17:11:12 +09:00
730d09f874
fix(http): upgrade ehttpc to 0.1.2 ( #4093 )
...
For fix the connection closed by keepalive
2021-01-29 09:35:08 +08:00
d98d26942c
fix(bridge-mqtt): add max_inflight_size option back
...
For compatibility with versions below 4.2, we still
use the `max_inflight_size` option, but generate it
as the `max_inflight`
Previous PR: https://github.com/emqx/emqx/pull/3938
2021-01-28 16:24:42 +08:00
c422b200be
Merge pull request #4088 from emqx/dev/v4.3.0
...
Auto-pull-request-on-2021-01-27
2021-01-27 22:02:52 +01:00
Ivan Dyachkov