Mnesia 认证

Mnesia 认证不依赖外部数据源，使用上足够简单轻量。

插件：

Mnesia 认证默认使用 sha256 进行密码哈希加密，可在 中更改：

  1. # etc/plugins/emqx_auth_mnesia.conf
  3. ## Value: plain | md5 | sha | sha256 
  4. auth.mnesia.password_hash = sha256

配置后，新增的预设认证数据与通过 HTTP API 添加的认证数据将以哈希密文存储在 EMQ X 内置数据库中。

可以通过配置文件预设认证数据，编辑配置文件：etc/plugins/emqx_auth_mnesia.conf

预设认证数据格式兼容 emqx_auth_clientid 与 emqx_auth_username 插件的配置格式

  1. # etc/plugins/emqx_auth_mnesia.conf
  3. ## clientid 认证数据
  4. auth.client.1.clientid = admin_client
  5. auth.client.1.password = public
  7. ## username 认证数据
  8. auth.user.2.username = admin
  9. auth.user.2.password = public

插件启动时将读取预设认证数据并加载到 EMQ X 内置数据库中，节点上的认证数据会在此阶段同步至集群中。

添加认证数据

  • Clientid

    1. # Request
    2. POST api/v4/auth_clientid
    3. {
    4.     "clientid": "emqx_c",
    5.     "password": "emqx_p"
    6. }
    7. # Response
    8. {
    9.     "code": 0
    10. }

  • Username

    1. # Request
    2. POST api/v4/auth_username
    3. {
    4.     "username": "emqx_u",
    5.     "password": "emqx_p"
    6. }
    8. # Response
    9. {
    10.     "code": 0
    11. }

批量添加认证数据

  • Clientid

  • Username

    1. # Request
    2. [
    3.     {
    4.             "username": "emqx_u_1",
    5.             "password": "emqx_p"
    7.     {
    8.         "username": "emqx_u_2",
    9.         "password": "emqx_p"
    10.     }
    11. ]
    13. # Response
    14. {
    15.     "data": {
    16.         "emqx_c_2": "ok",
    17.         "emqx_c_1": "ok"
    18.     },
    19.     "code": 0
    20. }

查看已经添加的认证数据

  • Clientid

    1. # Request
    2. GET api/v4/auth_clientid
    4. # Response
    5. {
    6.   "meta": {
    7.     "page": 1,
    8.     "limit": 10,
    9.     "count": 1
    10.   },
    11.   "data": [
    12.               "clinetid": "emqx_c",
    13.               "clinetid": "emqx_c_1",
    14.               "clinetid": "emqx_c_2"
    15.           ],
    16.   "code": 0
    17. }

  • Username

    1. # Request
    2. GET api/v4/auth_username
    4. # Response
    5. {
    6.   "meta": {
    7.     "page": 1,
    8.     "limit": 10,
    9.     "count": 1
    10.   },
    11.   "data": [
    12.               "username": "emqx_u",
    13.               "username": "emqx_u_2"
    14.           ],
    15.   "code": 0
    16. }

更改已添加的认证数据

  • Clientid

    1. # Request
    2. PUT api/v4/auth_clientid/${clientid}
    3. {
    4.     "password": "emqx_new_p"
    5. }
    7. # Response
    8. {
    9.     "code": 0
    10. }

查看指定的认证数据

注意此处返回的密码是使用配置文件指定哈希方式加密后的密码：

  • Clientid

    1. # Request
    2. GET api/v4/auth_clientid/${clientid}
    4. # Response
    5. {
    6.     "code": 0,
    7.     "data": {
    8.         "clientid": "emqx_c",
    9.         "password": "091dc8753347e7dc5d348508fe6323735eecdb84fa800548870158117af8a0c0"
    10.     }
    11. }

  • Username

    1. # Request
    2. GET api/v4/auth_username/${username}
    4. # Response
    5. {
    6.     "code": 0,
    7.     "data": {
    8.         "username": "emqx_u",
    9.         "password": "091dc8753347e7dc5d348508fe6323735eecdb84fa800548870158117af8a0c0"
    10.     }
    11. }

删除指定的 Clientid 认证数据

  • Clinetid

    1. # Request
    2. DELETE api/v4/auth_clientid/${clientid}
    4. # Response
    5. {
    6.     "code": 0
    7. }

  • Username

    ```bash

    Request

    DELETE api/v4/auth_username/${username}

    Response

    } ```