lrhkobe opened a new issue #484:
URL: https://github.com/apache/incubator-eventmesh/issues/484
## Feature Request
### Describe the solution you'd like
1. Add `eventmesh-acl-plugin` module refers to `eventmesh-connector-plugin`,
`eventmesh-acl-plugin` contains acl api design module and concrete acl plugin
implementation module;
2. I will provide a simple API interface design in `eventmesh-acl-api`
module and support access control in the `eventmesh-runtime` by calling the
API interface.
3. In order to avoid eventmesh running error , I provide a plugin(
`eventmesh-acl-impl` ) of the default empty implementation of the
`eventmesh-acl-api`, as to this plugin implemention, you can consider your own
requirements.If you are interested in this issue, welcome to participate and
suggestions.
For access control, we can provide several ways as follows：
- check client ip, which can be used in blacklist or whitelist
- check username and password of client
- check whether the pub/sub relation of the subsystem is registered,such as,
it can used to check whether the subsystem can send or receive msg from the
specified topic.
### API interface design in `eventmesh-acl-api`
```
@EventMeshSPI(isSingleton = true)
public interface AclService {
void init() throws AclException;
void start() throws AclException;
void shutdown() throws AclException;
void doAclCheckInConnect(Properties aclProperties) throws AclException;
void doAclCheckInHeartbeat(Properties aclProperties) throws AclException;
void doAclCheckInSend(Properties aclProperties) throws AclException;
void doAclCheckInReceive(Properties aclProperties) throws AclException;
}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
