我最近配置了RabbitMQ的本地实例,以便与OAuth提供程序一起使用,以便向管理UI验证用户。身份验证配置的这一部分正在工作,但所需的配置设置似乎对通过AMPQ连接到RabbitMQ的基本身份验证产生了影响。
以下是RabbitMQ实例的配置:
[
{rabbit, [
{auth_backends, [rabbit_auth_backend_oauth2]}
]},
{rabbitmq_management, [
{disable_basic_auth, false},
{enable_uaa, false},
{oauth_enabled, true},
{oauth_client_id, "D9BXNFPta...."},
{oauth_provider_url, "https://.....auth0.com"}
]
},
{rabbitmq_auth_backend_oauth2, [
{resource_server_id, <<"rabbitmq">>},
{extra_scopes_source, <<"permissions">>},
{key_config, [
{default_key, <<"qbDkJxa_....">>},
{signing_keys,
#{<<"qbDkJxa_....">> => {pem, <<"-----BEGIN PUBLIC KEY-----
....
-----END PUBLIC KEY-----">>}
}
}]
}
]}
].
连接基本身份验证时出错:
PLAIN login refused: Authentication using an OAuth 2/JWT token failed: provided token is invalid