[rabbitmq-discuss] How to deal with untrusted publishers

[Dennis Jacobfeuerborn]

Is there no way to accomplish something like this with RabbitMQ? If I can 
identify who published a message on the consumer end then I could also 
modify the message there so I really only need a way make the publisher of 
the messages identifiable.

Regards,
  Dennis

On Saturday, December 21, 2013 4:03:48 PM UTC+1, Dennis Jacobfeuerborn 
wrote:
>
> Hi,
> I'm currently working with a system where a publisher pushed messages to 
> an exchange which end up in a queue and then get read by a consumer and 
> stored in a database. The messages are of the form "<key> <value>" and 
> where in the database the key ist stored is determined by the key.
>
> Now I want to add another publisher and the information of that publisher 
> is supposed to be stored in a different table.
>
> The problem is that technically I need to change the message format to 
> "<publisher>.<key> <value>" so the consumer can know where to store the 
> keys but for security reasons I cannot really rely on the publisher sending 
> the correct data so I really need to insert the <publisher> bit on the 
> broker side based on the username the publisher connects with. For example:
>
> - Publisher connects with the credentials "publisher1"/(some password)
> - Publisher sends message "mykey myvalue" to exchange X
> - Exchange X modifies the message and prepends a string containing the 
> username resulting in the message "publisher1.mykey myvalue"
> - Consumer receives the message and can store the data in the appropriate 
> place
>
> Is there a way to accomplish this or something similar with rabbitmq?
>
> Regards,
>   Dennis
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20140212/eca22033/attachment.html>