[rabbitmq-discuss] How to deal with untrusted publishers

Dennis Jacobfeuerborn djacobfeuerborn at gmail.com
Sat Dec 21 15:03:48 GMT 2013


Hi,
I'm currently working with a system where a publisher pushed messages to an 
exchange which end up in a queue and then get read by a consumer and stored 
in a database. The messages are of the form "<key> <value>" and where in 
the database the key ist stored is determined by the key.

Now I want to add another publisher and the information of that publisher 
is supposed to be stored in a different table.

The problem is that technically I need to change the message format to 
"<publisher>.<key> <value>" so the consumer can know where to store the 
keys but for security reasons I cannot really rely on the publisher sending 
the correct data so I really need to insert the <publisher> bit on the 
broker side based on the username the publisher connects with. For example:

- Publisher connects with the credentials "publisher1"/(some password)
- Publisher sends message "mykey myvalue" to exchange X
- Exchange X modifies the message and prepends a string containing the 
username resulting in the message "publisher1.mykey myvalue"
- Consumer receives the message and can store the data in the appropriate 
place

Is there a way to accomplish this or something similar with rabbitmq?

Regards,
  Dennis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20131221/76e2da66/attachment.html>


More information about the rabbitmq-discuss mailing list