Considering MQTT's pub/sub behavior, topic namespace is not isolated and any user can access every other user's data on a topic. I've seen services like flespi which claim they provide isolated name spaces but some of them use containers to isolate users... Is it possible to modify an MQTT broker, e.g. Mosquitto, for that purpose? Or is there such open source broker?
1 Answers
Mosquitto can set access control to topics based on authentication username. This allows the administrator to restrict access to topics and restrict which clients can subscribe, publish or receive messages on particular topics. This is documented in Mosquitto’s documentation.
For greater flexibility you can also use the dynamic security plugin, or the mosquitto-go-auth plugin which allows you to use a variety of different data sources for authorization and ACL configuration.
Related