0

I have RabbitMQ + WebStomp. I would like totally restrict ability to send info to queue from JavaScript code. Instead only server side should do this.

In other words I would like allow following code:

...
client.subscribe("/queue/My-One-Way-Queue", function(m) {
...
client.onreceive = function(message) {
    console.log(message);
}

And prevent malicious software to do following:

client.send('/queue/My-One-Way-Queue', 
    {'reply-to': '/temp-queue/My-One-Way-Queue'}, text);
Dewfy
  • 23,277
  • 13
  • 73
  • 121

1 Answers1

0

You need to create a user for the JavaScript client that has read permissions only. See: https://www.rabbitmq.com/access-control.html

old_sound
  • 2,243
  • 1
  • 13
  • 16