Hướng Dẫn Xác Thực và Ủy Quyền Cho Mosquitto Broker Sử Dụng Plugin mosquitto-go-auth và MySQL (Phần 2)

$ sudo add-apt-repository ppa:longsleep/golang-backports
$ sudo apt update
$ sudo apt install golang-go

$ go version
go version go1.22.5 linux/amd64

$ git clone https://github.com/iegomez/mosquitto-go-auth
$ cd mosquitto-go-auth

# Điều chỉnh đường dẫn nếu cần
CFLAGS := -I/usr/include -fPIC

$ sudo cp go-auth.so /etc/mosquitto/

allow_anonymous false
listener 1883  # Cổng kết nối tới Mosquitto Broker

auth_plugin /etc/mosquitto/conf.d/go-auth.so

auth_opt_log_level debug
auth_opt_log_dest file
auth_opt_log_file /var/log/mosquitto/mosquitto.log

auth_opt_backends mysql
auth_opt_mysql_host localhost
auth_opt_mysql_port 3306
auth_opt_mysql_user <tên_người_dùng_MySQL>
auth_opt_mysql_password <mật_khẩu_MySQL>
auth_opt_mysql_dbname go_auth_test

auth_opt_mysql_userquery SELECT password_hash FROM test_user WHERE (username = ?) limit 1
auth_opt_mysql_superquery SELECT COUNT(*) FROM test_user WHERE (username = ?) AND (is_admin = 1)
auth_opt_mysql_aclquery SELECT topic FROM test_acl INNER JOIN test_user ON test_user.id=test_acl.test_user_id WHERE (username = ?) AND (rw = ? OR rw=3)
auth_opt_hasher bcrypt
auth_opt_hasher_cost 10

CREATE DATABASE go_auth_test;
USE go_auth_test;

CREATE TABLE test_user(
id mediumint not null auto_increment,
username varchar(100) not null,
password_hash varchar(200) not null,
is_admin boolean not null,
primary key(id)
);

CREATE TABLE test_acl(
id mediumint not null auto_increment,
test_user_id mediumint not null,
topic varchar(200) not null,
rw int not null,
primary key(id),
foreign key(test_user_id) references test_user(id)
ON DELETE CASCADE
ON UPDATE CASCADE
);

INSERT INTO test_user VALUES (NULL, "admin", "mật khẩu đã hashed", 1);
INSERT INTO test_user VALUES (NULL, "user1", "mật khẩu đã hashed", 0);

INSERT INTO test_acl VALUES (NULL, 2, "read_topic", 1);
INSERT INTO test_acl VALUES (NULL, 2, "write_topic", 2);
INSERT INTO test_acl VALUES (NULL, 2, "read_write_topic", 3);

$ sudo systemctl restart mosquitto.service
$ sudo systemctl status mosquitto.service