feat: enforce mqtt auth tls and keepalive semantics

2026-02-23 14:45:37 -05:00
parent 7dcf5776b3
commit b2312c0dac
8 changed files with 167 additions and 14 deletions
--- a/src/NATS.Server/Auth/AuthService.cs
+++ b/src/NATS.Server/Auth/AuthService.cs
@@ -149,6 +149,19 @@ public sealed class AuthService
        return raw.ToArray();
    }

+    public static bool ValidateMqttCredentials(
+        string? configuredUsername,
+        string? configuredPassword,
+        string? providedUsername,
+        string? providedPassword)
+    {
+        if (string.IsNullOrEmpty(configuredUsername) && string.IsNullOrEmpty(configuredPassword))
+            return true;
+
+        return string.Equals(configuredUsername, providedUsername, StringComparison.Ordinal)
+            && string.Equals(configuredPassword, providedPassword, StringComparison.Ordinal);
+    }
+
    public string EncodeNonce(byte[] nonce)
    {
        return Convert.ToBase64String(nonce)