taigrr/nats.docs
1
0
Fork 0
mirror of https://github.com/taigrr/nats.docs synced 2025-01-18 04:03:23 -08:00
Code Issues Projects Releases Wiki Activity

Update authorization.md

Browse Source
This commit is contained in:
Ginger Collison 2020-01-30 16:21:13 -06:00 committed by GitHub
parent 5d18b8adfa
commit 401aa911fb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nats-server/configuration/securing_nats/authorization.md
View File

@ -30,17 +30,17 @@ The `permission` map provides additional properties for configuring a `permissio
## Allow Responses Map ## Allow Responses Map
The `allow_responses` option dynamically allows publishing to reply subjects, this works well for service responders. The `allow_responses` option dynamically allows publishing to reply subjects and works well for service responders.
When set to `true`, excepting any `publish` permissions, implicitly all publish permissions are denied unless it is the reply subject in a request received by the client. When set to `true`, excepting any `publish` permissions, implicitly all publish permissions are denied unless it is the reply subject in a request received by the client.
The `allow_responses` map also allow you to configure a maximum number of responses and how long to allow the dynamic permission after a message is received. The `allow_responses` map also allows you to configure a maximum number of responses and how long to allow the dynamic permission after a message is received.
| Property | Description | | Property | Description |
| :--- | :--- | | :--- | :--- |
| `max` | The maximum number of response messages that can be returned to a request. | | `max` | The maximum number of response messages that can be returned to a request. |
| `expires` | The duration of time to allow a response. Values such as `1s`, `1m`, `1h` (1 second, minute, hour) etc can be specified. | | `expires` | The duration of time to allow a response. Values such as `1s`, `1m`, `1h` (1 second, minute, hour) etc can be specified. |
If `allow_responses` set to `true` rather than a specific configuration, it defaults to the equivalent of `{ max: 1 }`. If `allow_responses` is set to `true` rather than a specific configuration, it defaults to the equivalent of `{ max: 1 }`.
**Important Note** When using `nsc` to configure your users, you can specify the `--allow-pub-response` and `--response-ttl` to control these settings. **Important Note** When using `nsc` to configure your users, you can specify the `--allow-pub-response` and `--response-ttl` to control these settings.
@ -125,6 +125,6 @@ authorization: {
} }
``` ```
User `a` has no restrictions. User `b` can listen on `q` for requests. If the received request has a reply subject it can reply at most one message. User `c` can also listen on `q` for requests, but is able to return at most 5 reply messages. The reply subject can be publish to for at most `1` minute. User `a` has no restrictions. User `b` can listen on `q` for requests. If the received request has a reply subject it can reply at most with one message. User `c` can also listen on `q` for requests, but is able to return at most 5 reply messages, and the reply subject can be published at most for `1` minute.