[rabbitmq-discuss] How to deal with untrusted publishers
Dennis Jacobfeuerborn
djacobfeuerborn at gmail.com
Sat Dec 21 15:03:48 GMT 2013
Hi,
I'm currently working with a system where a publisher pushed messages to an
exchange which end up in a queue and then get read by a consumer and stored
in a database. The messages are of the form "<key> <value>" and where in
the database the key ist stored is determined by the key.
Now I want to add another publisher and the information of that publisher
is supposed to be stored in a different table.
The problem is that technically I need to change the message format to
"<publisher>.<key> <value>" so the consumer can know where to store the
keys but for security reasons I cannot really rely on the publisher sending
the correct data so I really need to insert the <publisher> bit on the
broker side based on the username the publisher connects with. For example:
- Publisher connects with the credentials "publisher1"/(some password)
- Publisher sends message "mykey myvalue" to exchange X
- Exchange X modifies the message and prepends a string containing the
username resulting in the message "publisher1.mykey myvalue"
- Consumer receives the message and can store the data in the appropriate
place
Is there a way to accomplish this or something similar with rabbitmq?
Regards,
Dennis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20131221/76e2da66/attachment.html>
More information about the rabbitmq-discuss
mailing list