20187010333
85%

Ran 13 Dec 2025 05:51AM UTC

Jobs 1

Files 61

Run time 1min

Badge

Embed ▾

Committed 12 Dec 2025 04:21PM UTC coverage: 83.736% (-1.3%) from 85.056%

Build # 20187010333

Build Type

push

github

Committed by

web-flow

Commit Message

[CHANGED] MQTT: Permissions to "$MQTT." are now implicit (#7637)

When the server has to create a subscription for a JetStream consumer
(in case of QoS1/2), it would do it with a `$MQTT_sub.` prefix. This
then required users to explicitly add this subject prefix when users had
subscribe permissions.
In more complex setups, there would likely be other permissions to be
granted.

Since the server already checks that a MQTT client is allowed to publish
or subscribe on a given topic/subject based on the user's permissions
set, then the internal need to subscribe to a `$MQTT_sub.xxx` subject
should not be checked. In other words, the server would not create a
subscription on that internal subject if the user is not allowed to
subscribe on "foo" for instance.

So the change in this PR implicitly allows MQTT clients (not regular
NATS core clients) or non client connections (say routes, leaf, etc..)
to pub/sub on any "$MQTT." prefixed subject. Note that the change still
allows "deny" clause to be applied in case the user would want to
explicitly restrict some of the MQTT related subjects to be exchanged.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>

Run Details

73262 of 87492 relevant lines covered (83.74%)

329006.81 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
1	80.68	-0.57%	src/github.com/nats-io/nats-server/server/log.go
2	72.46	-0.45%	src/github.com/nats-io/nats-server/server/avl/seqset.go
2	63.16	-10.53%	src/github.com/nats-io/nats-server/server/jetstream_events.go
2	87.61	-0.16%	src/github.com/nats-io/nats-server/server/sublist.go
2	85.25	-0.92%	src/github.com/nats-io/nats-server/server/util.go
4	88.5	0.17%	src/github.com/nats-io/nats-server/server/consumer.go
4	90.16	-0.08%	src/github.com/nats-io/nats-server/server/leafnode.go
4	87.16	-0.11%	src/github.com/nats-io/nats-server/server/monitor.go
4	42.86	-57.14%	src/github.com/nats-io/nats-server/server/service.go
5	46.15	-38.46%	src/github.com/nats-io/nats-server/server/const.go
7	83.76	-0.24%	src/github.com/nats-io/nats-server/server/jetstream.go
8	86.35	0.05%	src/github.com/nats-io/nats-server/server/events.go
11	87.72	-0.89%	src/github.com/nats-io/nats-server/server/auth.go
11	73.63	0.25%	src/github.com/nats-io/nats-server/server/jetstream_api.go
11	69.88	-1.01%	src/github.com/nats-io/nats-server/server/websocket.go
12	94.0	-0.16%	src/github.com/nats-io/nats-server/server/gateway.go
15	78.92	-4.52%	src/github.com/nats-io/nats-server/server/store.go
29	82.37	-0.22%	src/github.com/nats-io/nats-server/server/jetstream_cluster.go
29	87.23	-0.09%	src/github.com/nats-io/nats-server/server/raft.go
34	82.61	-0.21%	src/github.com/nats-io/nats-server/server/filestore.go
51	83.51	-1.5%	src/github.com/nats-io/nats-server/server/memstore.go
77	78.48	-1.55%	src/github.com/nats-io/nats-server/server/opts.go
84	19.85	-61.76%	src/github.com/nats-io/nats-server/server/signal.go
115	89.7	-3.42%	src/github.com/nats-io/nats-server/server/server.go
160	93.66	-1.23%	src/github.com/nats-io/nats-server/server/client.go
238	84.22	-9.49%	src/github.com/nats-io/nats-server/server/route.go
330	89.88	0.26%	src/github.com/nats-io/nats-server/server/mqtt.go
506	61.78	-28.44%	src/github.com/nats-io/nats-server/server/reload.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	20187010333.1	13 Dec 2025 05:51AM UTC	61	83.74	GitHub Action Run

nats-io / nats-server / 20187010333
85%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 20187010333

nats-io / nats-server / 20187010333 85%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 20187010333

nats-io / nats-server / 20187010333
85%

README BADGES
x