Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Make sure that MQTT LWT is well authroized #2569

Open
drasko opened this issue Dec 5, 2024 · 0 comments
Open

Feature: Make sure that MQTT LWT is well authroized #2569

drasko opened this issue Dec 5, 2024 · 0 comments
Assignees

Comments

@drasko
Copy link
Contributor

drasko commented Dec 5, 2024

Is your feature request related to a problem? Please describe.

Maybe - it might be that LWT is not well authorized currently, and that the broker will shoot it to topics it should not, as it sends it on behalf of a certain client (wich might not have permissions to publish on that topic).

Describe the feature you are requesting, as well as the possible use case(s) for it.

Forllowing this and this, we must make sure that LWT topic in CONNECT package is valid, i.e. that client has permissions to publish on that topic.

One trouble with that is that permissions to publish on that topic might change during the life of the client, but the LWT config stays written in the broker and will be executed upon the client disconnection. We need to agree how we will treat this case - probably for now best we can do is just allow if on connection this is allowed, or force re-connect upon changed permissions, if the changed permissions were on client's LWT topic (LWT topic is important and should be also shown in UI).

Indicate the importance of this feature to you.

Must-have

Anything else?

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants