- Property Manager name: Variable Hash Transformation
- Behavior version: The
latest
rule format supports thedcpAuthHMACTransformation
behavior v1.0. - Rule format status: Beta, possible breaking changes
- Access: Read/Write
- Allowed in includes: Not available for
latest
rule format
The Internet of Things: Edge Connect product allows connected users and devices to communicate on a publish-subscribe basis within reserved namespaces. In conjunction with dcpAuthVariableExtractor
, this behavior affects how clients can authenticate themselves to edge servers, and which groups within namespaces are authorized to access topics. It transforms a source string value extracted from the client certificate and stored as a variable, then generates a hash value based on the selected algorithm, for use in authenticating the client request.
Note that you can apply this hash transformation, or either of the dcpAuthRegexTransformation
or dcpAuthSubstringTransformation
behaviors.
Option | Type | Description | Requires | |
---|---|---|---|---|
hashConversionAlgorithm | enum | Specifies the hash algorithm. | {"displayType":"enum","options":["SHA256","MD5","SHA384"],"tag":"select"} | |
SHA256 | Use SHA-256. | |||
MD5 | Use MD5. | |||
SHA384 | Use SHA-384. | |||
hashConversionKey | string | Specifies the key to generate the hash, ideally a long random string to ensure adequate security. | {"displayType":"string","tag":"input","type":"text"} |