Andras/BoundlessFlowCampus2K
4
7
Fork 0
Code Issues 90 Pull requests 7 Projects Releases Packages Wiki Activity Actions

#10 Add MQTT authentication #140

Closed
b25marem wants to merge 0 commits from #10-mqtt-login into team_2_week_1
pull from: #10-mqtt-login
merge into: Andras:team_2_week_1
Conversation 5 Commits - Files changed - +8 -3
b25marem commented 2026-04-07 07:06:46 +00:00
Collaborator
Copy link

Implemmented MQTT authentication in the Mosquitto container

changes made:
disabled anonymous access
added password_file to mosquitto configuration
created a user automatically during container startup
updated mosquitto-init to use eclipse-mosquitto

Current credentails:
username: mqttuser, password: mqttpassword

Tested:
Mosquitto starts successfully with authentication enabled
Anonymous MQTT connections are rejected with NotAuthorized
Existing services fail until they are updated to provide credentials

Note:
Other services are not yet updated to use authentication. it will be handled in a separate task.

Implemmented MQTT authentication in the Mosquitto container changes made: disabled anonymous access added password_file to mosquitto configuration created a user automatically during container startup updated mosquitto-init to use eclipse-mosquitto Current credentails: username: mqttuser, password: mqttpassword Tested: Mosquitto starts successfully with authentication enabled Anonymous MQTT connections are rejected with NotAuthorized Existing services fail until they are updated to provide credentials Note: Other services are not yet updated to use authentication. it will be handled in a separate task.
b25marem changed title from WIP: #10 Add MQTT authentication to #10 Add MQTT authentication 2026-04-07 07:54:35 +00:00
a24danwe commented 2026-04-07 12:43:25 +00:00
Collaborator
Copy link

assign me

assign me
a24danwe commented 2026-04-07 13:43:46 +00:00
Collaborator
Copy link

All the changes for MQTT authentication look right, they do what they are supposed to do. I have noticed in relation to this change that all other MQTT clients that connect anonymously will most likely fail. I have checked both readTempSensorMockup and middleware and they will likely not work after the change as I cannot see any authentication. So both those files will have to be updated as well in another issue.

All the changes for MQTT authentication look right, they do what they are supposed to do. I have noticed in relation to this change that all other MQTT clients that connect anonymously will most likely fail. I have checked both readTempSensorMockup and middleware and they will likely not work after the change as I cannot see any authentication. So both those files will have to be updated as well in another issue.
a24danwe commented 2026-04-07 13:49:39 +00:00
Collaborator
Copy link

A question also: "chmod 0700 /mosquitto/config/passwd" should this be 0600 instead since this is a password file and doesn't need execute permissions?

A question also: "chmod 0700 /mosquitto/config/passwd" should this be 0600 instead since this is a password file and doesn't need execute permissions?
a24danwe commented 2026-04-08 07:51:41 +00:00
Collaborator
Copy link

A question: Now the credentials are hardcoded in the file. Is this a safe way or should they be stored in a safer space ( e.g environment variables)?

A question: Now the credentials are hardcoded in the file. Is this a safe way or should they be stored in a safer space ( e.g environment variables)?
c24elipe commented 2026-04-10 07:18:13 +00:00
Collaborator
Copy link

New pr was created.

New pr was created.
c24elipe closed this pull request 2026-04-10 07:18:22 +00:00
a24timsv deleted branch #10-mqtt-login 2026-04-17 12:41:31 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
_CRITICAL_

Only use this label for critical tasks that are project-scope,and must be addressed ASAP.

  
API

   
app

   
backEnd

   
Blocked, waiting for further changes

   
bug

Something is not working

  
cleanup

Issues to cleanup the codebase (restructure folders, remove deprecated or smelly code)

  
close

Issue to close

  
design

   
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
feature request

   
frontEnd

   
help wanted

Need some help

  
invalid

Something is wrong

  
low priority

   
needs input

Issue needs input from product owner or customer

  
needs review

issue is in need of review

  
project documentation

   
question

More information is needed

  
research

   
reviewed

This Issue has been reviewed

  
script

   
security

use this for security-related issues

  
SQL

  
style

   
testing

   
topLevel

Reserved for top-level, project-wide issues.

  
wontfix

This won't be fixed

No labels
_CRITICAL_
API
app
backEnd
Blocked, waiting for further changes
bug
cleanup
close
design
duplicate
enhancement
feature request
frontEnd
help wanted
invalid
low priority
needs input
needs review
project documentation
question
research
reviewed
script
security
SQL
style
testing
topLevel
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Andras/BoundlessFlowCampus2K!140
No description provided.