dcpAuthHMACTransformation

Property Manager name: Variable Hash Transformation
Behavior version: The v2024-10-21 rule format supports the dcpAuthHMACTransformation behavior v1.0.
Rule format status: GA, stable
Access: Read/Write
Allowed in includes: No (temporarily)

The Internet of Things: Edge Connect product allows connected users and devices to communicate on a publish-subscribe basis within reserved namespaces. In conjunction with dcpAuthVariableExtractor, this behavior affects how clients can authenticate themselves to edge servers, and which groups within namespaces are authorized to access topics. It transforms a source string value extracted from the client certificate and stored as a variable, then generates a hash value based on the selected algorithm, for use in authenticating the client request.

Note that you can apply this hash transformation, or either of the dcpAuthRegexTransformation or dcpAuthSubstringTransformation behaviors.

Option	Type	Description
`hashConversionAlgorithm`	enum	Specifies the hash algorithm.	{"displayType":"enum","options":["SHA256","MD5","SHA384"],"tag":"select"}
	`SHA256`	Use SHA-256.
	`MD5`	Use MD5.
	`SHA384`	Use SHA-384.
`hashConversionKey`	string	Specifies the key to generate the hash, ideally a long random string to ensure adequate security.	{"displayType":"string","tag":"input","type":"text"}