Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

spec!: force the publisher JWT to contain the allowed topics #620

Merged
merged 2 commits into from Jul 29, 2022

Conversation

dunglas
Copy link
Owner

@dunglas dunglas commented Feb 22, 2022

Closes #579.

This is a BC break, but it improves the security of the protocol.
To allow a publisher to publish to all topics, a star (*) can be used.

@dunglas dunglas changed the title specforce the publisher JWT to contain the allowed topics spec!: force the publisher JWT to contain the allowed topics Feb 22, 2022
@dunglas dunglas added the spec Spec-related issues label Feb 22, 2022
spec/mercure.md Outdated Show resolved Hide resolved
@stale
Copy link

stale bot commented Apr 24, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the wontfix This will not be worked on label Apr 24, 2022
@dunglas dunglas added pinned The issue must not be marked as stale and removed wontfix This will not be worked on labels Apr 26, 2022
@dunglas dunglas force-pushed the spec/publisher-authorization branch from 7703207 to e2eaa20 Compare July 26, 2022 08:22
@dunglas dunglas merged commit 1711b96 into main Jul 29, 2022
@dunglas dunglas deleted the spec/publisher-authorization branch July 29, 2022 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pinned The issue must not be marked as stale spec Spec-related issues
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Mercure publishes to topic JWT token should not be allowed to
2 participants