mosquitto-users team mailing list archive

[John DuPaix <jrdupaix@xxxxxxxxxxx>]

Quick question.  I would like to use an auth plugin to verify a username/password when someone establishes a connection with my mosquitto server.  Once they are connected they are able to publish to any topic and subscribe to only specific ones.  I know that i can use acl to make sure they subscribe to only the permitted ones. The question i have is this - Does a user have to connect before they can publish?  For example, is it it possible for a user to issue a "publish" command using a valid username/password before they issue a "connect" command to mosquitto?  Does the same apply to "subscribe"? Or does mosquitto force users to always "connect" before they do anything?