dcp_auth_hmac_transformation

Property Manager name: Variable Hash Transformation
Behavior version: The v2024-01-09 rule format supports the dcp_auth_hmac_transformation behavior v1.0.
Rule format status: GA, stable
Access: Read/Write
Allowed in includes: No (temporarily)

The Internet of Things: Edge Connect product allows connected users and devices to communicate on a publish-subscribe basis within reserved namespaces. In conjunction with dcp_auth_variable_extractor, this behavior affects how clients can authenticate themselves to edge servers, and which groups within namespaces are authorized to access topics. It transforms a source string value extracted from the client certificate and stored as a variable, then generates a hash value based on the selected algorithm, for use in authenticating the client request.

Note that you can apply this hash transformation, or either of the dcp_auth_regex_transformation or dcp_auth_substring_transformation behaviors.

Option	Type	Description
`hash_conversion_algorithm`	enum	Specifies the hash algorithm.	{"displayType":"enum","options":["SHA256","MD5","SHA384"],"tag":"select"}
	`SHA256`	Use SHA-256.
	`MD5`	Use MD5.
	`SHA384`	Use SHA-384.
`hash_conversion_key`	string	Specifies the key to generate the hash, ideally a long random string to ensure adequate security.	{"displayType":"string","tag":"input","type":"text"}