Releases: iegomez/mosquitto-go-auth
Cache refresh option
Support new plugin interface
- Supports upcoming Mosquitto plugin interface.
- Fixes MySQL SSL root cert not being set.
1.0 release
This release includes the following changes:
- Fixes a security concern where cache keys were not being hashed.
- Adds new
bcrypt
andargon2id
hashing options for the plugin and thepw
utility. - Deprecates general salt encoding option in favour of a dedicated
pbkdf2
one. - Improves documentation on Mosquitto's 1.5 and up
MOSQ_ACL_SUBSCRIBE
access option. - Some other minor cleanups.
Please check the updated README for new options.
Add local cache and handle Redis moved errors
- A new cache store using go-cache is available and may be used instead of the regular Redis ones. Check README for new cache options.
- Added basic handling of
MOVED
errors in Redis cluster for both the cache and the backend. - Refactored cache by moving it to its own package and adding tests.
Redis Cluster, disabled superusers and others
This release brings these changes:
- Redis backend can now run against a single instance or a Redis cluster.
- Plugin cache may also rely on a Redis cluster or a single instance for caching.
- Superusers may be disabled per backend or for the whole plugin.
- Better prefixes support for JWT.
- Better HTTP status codes support for HTTP and JWT backends.
- Better Docker support thanks to various contributions.
- Auth source support for MongoDB. Thanks @coldfire84!
Thanks to everyone in https://github.com/iegomez/mosquitto-go-auth/graphs/contributors and others openings issues for both your contributions and the encouragement to get back to actively developing the plugin.
There's much work to be done yet so I'm keeping the release in a 0.X.X status right now, but I hope the upcoming improvements for testing, dockerization and subscribe semantics to finally push it to a stable v1
status.
Cheers!
Fix missing changes
I failed to commit some changes when refactoring and that prevented the plugin from building.
Fix hash check and refactor
This release fixes a panic for incorrectly formatted passwords.
Code had some refactoring done, but backends functionality remains the same.
Fix plugin ACL checks
This release fixes ACL checks for the plugin backend.
Redis MOSQL_ACL_SUBSCRIBE support
This release adds MOSQL_ACL_SUBSCRIBE support to the Redis backend, removes the default username and password for MongoDB tests and cleans up access ints at tests acl checks.
gRPC support
Added gRPC backend.