[ExHook] EMQX Still Perform Publish Even When the Authorize Hook Returns False about emqx HOT 4 CLOSED

Hi @TxMat ,

I assume you have the default EMQX file authorization enabled, which ends with {allow, all}. rule.
As this is matched (before calling exhook), external on_client_authorize is not even called and message processing continues, triggering on_message_publish ex hook.
If my assumption is correct, please try disabling File authorization in EMQX dashboard and repeat the experiment.

from emqx.

Hi @SergeTupchiy

Thanks for the quick response, unfortunately I do not have the emqx file authorization enabled as well as any other auth/authorization option enabled. Everything pass though exhooks, and my client authorize hook is called as it prints to stdout and does some work on my back end.

Also when returning false it successfully blocks any unauthorized subscribe request

Only the publish hook seem to be called even after a failure of the authorization

Is this expected behaviour?

from emqx.

@TxMat,
It's not expected. Can you check what happens on EMQX side when you publish a message?
Does it log a warning like:

2023-12-01T11:34:41.542812+02:00 [warning] msg: cannot_publish_to_topic, mfa: emqx_channel:process_publish/2(641), peername: 127.0.0.1:56052, clientid: mqttx-cli-pub, topic: t/test, reason: not_authorized

?

from emqx.

I unfortunately was unable to replicate the bug Friday and today at work so i'll close the issue. If it shows up again i'll reopen it and provide you the logs of the broker.

from emqx.