emqx Files

Features

• #11610 Implemented a preliminary Role-Based Access Control for the Dashboard.

In this version, there are two predefined roles: - Administrator: This role could access all resources.

• Viewer: This role can only view resources and data, corresponding to all GET requests in the REST API.

• #11631 Added Single Sign-On (SSO) feature and integrated with LDAP.

• #11656 Integrated the SAML 2.0 Support for SSO.

• #11599 Supported audit logs to record operations from CLI, REST API, and Dashboard in separate log files.

Enhancements

• #11597 Upgraded ekka to 0.15.13, which incorporates the following changes:
• Upgraded Mria to 0.6.2.
• Introduced the ability to configure the bootstrap data sync batch size, as detailed in Mria PR.
• Enhanced the reliability of mria_membership processes, as described in Mria PR.
• Fix log message formatting error.
• Added node.default_bootstrap_batch_size option to EMQX configuration. Increasing the value of this option can greatly reduce a replicant node startup time, especially when the EMQX cluster interconnect network latency is high and the EMQX built-in database holds a large amount of data, e.g. when the number of subscriptions is high.
• #11620 Added a new rule-engine SQL function bytesize to get the size of a byte-string. e.g. SELECT * FROM "t/#" WHERE bytesize(payload) > 10.
• #11642 Updated to quicer version 0.0.200 in preparation for enabling openssl3 support for QUIC transport.

Bug Fixes

• #11682 Fixed an issue where logging would stop if "Rotation Size" would be set to infinity on file log handlers.
• #11567 Improve EMQX graceful shutdown (emqx stop command):
• Increase timeout from 1 to 2 minutes.
• Printed an error message if EMQX can't stop gracefully within the configured timeout.
• Print periodic status messages while EMQX is shutting down.
• #11584 Fixed telemetry reporting error on Windows when os_mon module is unavailable.
• #11605 Lowered CMD_overridden log severity from warning to info.
• #11622 Upgraded rpc library gen_rpc from 2.8.1 to 3.1.0.
• #11623 Upgraded library esockd from 5.9.6 to 5.9.7. This upgrade included:
• Enhancements regarding proxy protocol error and timeout. esockd pr#178
• Lowered ssl_error exceptions to info-level logging. esockd pr#180
• Malformed MQTT packet parsing exception log level is lowered from error to info.
• In command emqx ctl listeners output, the shutdown_count counter is incremented when TLS handshake failure (ssl_error) or Malformed packet (frame_error) happens.
• #11661 Fixed log formatter when log.HANDLER.formatter is set to 'json'. The bug was introduced in v5.0.4 where the log line was no longer a valid JSON, but prefixed with timestamp string and level name.
• #11667 Disable access to the logout endpoint for HTTP clients using API Keys to authenticate, as this endpoint is for the Dashboard only.
• #11627 Fixed resources cleanup in HStreamDB bridge. Prior to this fix, HStreamDB bridge might report errors during bridge configuration updates, since HStreamDB client/producer were not stopped properly.