Skip to content

Releases: iegomez/mosquitto-go-auth

Cache refresh option

23 Oct 23:52
e80c9df
Compare
Choose a tag to compare
  • Adds a cache refresh option that defaults to false to fix a security issue, see #100.
  • Fixes Postgres hashes options, see #95.
  • Updates readme to document MySQL options, custom plugin new info and warn about Cache's security issues when turning on refresh.

Support new plugin interface

07 Oct 23:09
4b20bb3
Compare
Choose a tag to compare
  • Supports upcoming Mosquitto plugin interface.
  • Fixes MySQL SSL root cert not being set.

1.0 release

14 Jul 03:29
7dd3f5a
Compare
Choose a tag to compare

This release includes the following changes:

  1. Fixes a security concern where cache keys were not being hashed.
  2. Adds new bcrypt and argon2id hashing options for the plugin and the pw utility.
  3. Deprecates general salt encoding option in favour of a dedicated pbkdf2 one.
  4. Improves documentation on Mosquitto's 1.5 and up MOSQ_ACL_SUBSCRIBE access option.
  5. Some other minor cleanups.

Please check the updated README for new options.

Add local cache and handle Redis moved errors

28 Jun 01:32
52a9a8f
Compare
Choose a tag to compare
  • A new cache store using go-cache is available and may be used instead of the regular Redis ones. Check README for new cache options.
  • Added basic handling of MOVED errors in Redis cluster for both the cache and the backend.
  • Refactored cache by moving it to its own package and adding tests.

Redis Cluster, disabled superusers and others

24 May 06:09
5b603bf
Compare
Choose a tag to compare

This release brings these changes:

  • Redis backend can now run against a single instance or a Redis cluster.
  • Plugin cache may also rely on a Redis cluster or a single instance for caching.
  • Superusers may be disabled per backend or for the whole plugin.
  • Better prefixes support for JWT.
  • Better HTTP status codes support for HTTP and JWT backends.
  • Better Docker support thanks to various contributions.
  • Auth source support for MongoDB. Thanks @coldfire84!

Thanks to everyone in https://github.com/iegomez/mosquitto-go-auth/graphs/contributors and others openings issues for both your contributions and the encouragement to get back to actively developing the plugin.

There's much work to be done yet so I'm keeping the release in a 0.X.X status right now, but I hope the upcoming improvements for testing, dockerization and subscribe semantics to finally push it to a stable v1 status.

Cheers!

Fix missing changes

28 Feb 23:24
Compare
Choose a tag to compare

I failed to commit some changes when refactoring and that prevented the plugin from building.

Fix hash check and refactor

24 Feb 20:47
d53b09a
Compare
Choose a tag to compare

This release fixes a panic for incorrectly formatted passwords.
Code had some refactoring done, but backends functionality remains the same.

Fix plugin ACL checks

01 Oct 12:09
Compare
Choose a tag to compare

This release fixes ACL checks for the plugin backend.

Redis MOSQL_ACL_SUBSCRIBE support

30 Aug 19:35
Compare
Choose a tag to compare

This release adds MOSQL_ACL_SUBSCRIBE support to the Redis backend, removes the default username and password for MongoDB tests and cleans up access ints at tests acl checks.

gRPC support

19 Jun 21:29
Compare
Choose a tag to compare

Added gRPC backend.