Creating and updating a topic policy by using REST Administration APIs

System administrators can create and update topic policies by using REST Administration APIs.

Ensure that the following message hub creation tasks are complete:
  1. Create a message hub.
  2. Create a connection policy.

You can create a topic policy or update an existing topic policy by using a REST Administration API, or by using the Amlen WebUI. For more information about using the Amlen WebUI to create a topic policy, see Configuring message hubs by using the Amlen WebUI. Use a topic policy to control which clients can publish or subscribe to a specified topic.

You can use the Eclipse Amlen REST API POST method to create or update one or more topic policy objects. If the topic policy that is specified in the request does not exist in the Eclipse Amlen configuration, then the topic policy is created. Otherwise the topic policy configuration is updated.

For more information about the components you must specify to create a topic policy, including naming restrictions, see Configuring message hubs.
  1. To create or update a topic policy, use the Eclipse Amlen REST API POST method with the following Eclipse Amlen configuration URI:

    http://<admin-endpoint-IP:Port>/ima/v1/configuration/

  2. Provide TopicPolicy object configuration data in the payload of the POST method by using the following schema. Content-type is set to application/json. Ensure that capitalization and double quotation marks are used as shown.
    
    {    
       "TopicPolicy": {
         "<NameOfTopicPolicy>": {
           "Description": "string",
           "Topic": "string",
           "ActionList": "string",
           "MaxMessages": integer,
           "MaxMessagesBehavior": "RejectNewMessages"|"DiscardOldMessages",
           "MaxMessageTimeToLive": "string",
           "DisconnectedClientNotification": true|false,
           "ClientID": "string",
           "UserID": "string",
           "GroupID": "string",
           "CommonNames": "string",
           "ClientAddress": "string",
           "Protocol": "string"             
        }
      }
    }
    Where:
    NameOfTopicPolicy
    Required.
    Specifies the name of the topic policy.
    The name must not have leading or trailing spaces and cannot contain control characters, commas, double quotation marks, backslashes, or equal signs. The first character must not be a number or any of the following special characters:

    ! # $ % & ' ( ) * + - . / : ; < > ? @

    After the topic policy is created, you cannot change this name.
    Description
    Optional.
    Specifies a description for the topic policy.
    If you do not want a description, omit "Description":"description".
    Topic
    Required.
    Specifies the topic string or strings that the topic policy applies to.
    You can use an asterisk (*) as a wildcard. For example, to apply the topic policy to topic strings TOPICA/#, enter a topic of TOPICA/*. You must take care when you use a wildcard to ensure that you do not grant greater authority to topics than intended. For more information about how wildcard characters can be used, see Wildcards.
    The dollar sign ($) and asterisk (*) have special meanings in the Topic field. To use these characters as literals, use ${$} for a dollar sign, and use ${*} for an asterisk.
    You can use variable substitution in the topic string to ensure that only clients with specific user IDs, group IDs, client IDs, or client certificate common names can access a topic. The variables are:
    • ${UserID} for the user ID.
    • ${GroupID} for the group ID.
    • ${ClientID} for the client ID.
    • ${CommonName} for the client certificate common name.
    For example, if a topic string in a topic policy is ExampleTopic/TopicA/${ClientID}, a client with an ID of client_a can access topic ExampleTopic/TopicA/client_a. A client with an ID of client_b cannot access topic ExampleTopic/TopicA/client_a, but can access ExampleTopic/TopicA/client_b.
    ActionList
    Required.
    Specifies which messaging actions can be used by clients that connect to endpoints associated with this topic policy.
    You can specify the following values for a topic policy. To specify more than one, separate each value with a comma:
    • Publish

      Allows clients to publish to the topic that is specified in the topic policy.

    • Subscribe

      Allows clients to subscribe to the topic that is specified in the topic policy.

    MaxMessages
    Optional.
    Specifies the maximum number of messages that are kept for a subscription. This value is a guideline, rather than an absolute limit. If the system is running under stress, then the number of buffered messages on a subscription might be slightly higher than the MaxMessages value.
    The default value is 5000.
    MaxMessagesBehavior
    Optional.
    Specifies the behavior that is applied when the number of messages in the buffer for a subscription reaches the max messages value. That is, when the buffer for a subscription is full. The behavior is applied to both durable and non-durable subscriptions.
    The behavior can be one of the following options:
    • RejectNewMessages

      New messages are not accepted on the buffer for the subscription.

    • DiscardOldMessages

      A percentage of the old messages on the buffer for the subscription are discarded. If a retained message is one of the old messages, it is discarded. The quality of service, persistence, and priority of the message does not prevent a message from being discarded. Therefore, if all messages must be received in order for your applications to function correctly, you cannot set MaxMessagesBehavior to DiscardOldMessages.

    The default behavior is RejectNewMessages.
    MaxMessageTimeToLive
    Optional.
    Specifies the maximum time, in seconds, that a published message that is associated with the topic policy can exist for in Eclipse Amlen.
    The value must be either unlimited or in the range 1-2147483647.
    The default value is unlimited and means that messages will not expire unless the publishing application specifies a time for messages to exist for.
    This value is applied only when the topic policy includes an action of publish.
    Ensure that client and server times are synchronized in order to minimize the possibility of expired messages being received.
    DisconnectedClientNotification: true|false
    Optional.
    Specifies whether notification messages are published for disconnected MQTT clients on arrival of a message.
    The default value is false.
    This value is applied only when the MQTT protocol is used.
    The notification messages are published to the reserved system topic $SYS/DisconnectedClientNotification
    You must specify at least one of the following filters:
    ClientID
    Specifies the client ID that is allowed to use the messaging actions that are specified in the topic policy. The client ID is allowed to use the messaging actions only on the topics that are specified in the policy.
    You can use an asterisk (*) at the end of the value to match 0 or more characters.
    To use the default value, where all client ID values are allowed to use the actions, omit "ClientID":"ClientID".
    UserID
    Specifies the messaging user ID that is allowed to use the messaging actions that are specified in the topic policy. The messaging user ID is allowed to use the messaging actions only on the topics that are specified in the policy.
    You can use an asterisk (*) at the end of the value to match 0 or more characters.
    To use the default value, where all user ID values are allowed to use the actions, omit "UserID": "UserID".
    GroupID
    Specifies the messaging group that is allowed to use the messaging actions that are specified in the topic policy. The messaging group is allowed to use the messaging actions only on the topics that are specified in the policy.
    You can use an asterisk (*) at the end of the value to match 0 or more characters.
    To use the default value, where all groups are allowed to use the actions, omit "GroupID": "GroupID".
    CommonNames
    Specifies the client certificate common name that must be used for a client to be allowed to use the actions that are specified in the topic policy. The client certificate common name allows clients to use the messaging actions only on the topics that are specified in the policy.
    You can use an asterisk (*) at the end of the value to match 0 or more characters.
    To use the default value, where all client certificates are allowed to use the actions, omit "CommonNames": "CommonNames".
    ClientAddress
    Specifies the client IP addresses that are allowed to use the messaging actions that are specified in the topic policy. The client IP addresses are allowed to use the messaging actions only on the topics that are specified in the policy.
    The IP address can contain an asterisk (*), or a comma-separated list of IPv4 or IPv6 addresses or ranges. For example, 192.0.2.32, 192.0.0.0, 192.0.2.0-192.0.2.100. The range must be specified from low to high.
    However, each IPv6 address must be enclosed in brackets [ ] either when expressed singly or in a range of addresses. IPv6 addresses cannot contain asterisks.
    The maximum number of client addresses that you can specify is 20.
    To use the default value, where all client IP addresses are allowed to connect, omit "ClientAddress":"IP_Address" or specify "ClientAddress":"*".
    Protocol
    Specifies which protocols are allowed to use the actions that are specified in the topic policy on the topics that are specified in the policy.
    You can choose from JMS and MQTT protocols. If there are any protocol plug-ins installed on the Eclipse Amlen server, you can specify these as well. To specify more than one value, separate each value with a comma. To specify all protocols, either specify a null value or omit "Protocol": "string".

    You can check that the configuration of your policy is as expected by using the Eclipse Amlen REST Administration API GET method. For more information about the GET method, see Viewing configuration details of objects that can be named by using REST Administration APIs.

The following example shows a POST method to create a topic policy called "MyTopicPolicy" by using cURL:


curl -X POST  \
   -H 'Content-Type: application/json'  \
   -d  '{                          
           "TopicPolicy": {   
               "MyTopicPolicy": {
                "Description": "Topic policy to authorize a client to publish to a topic.",
                "Topic": "*",
                "ClientID": "*",
                "ActionList": "Publish,Subscribe"
              }
          }
      }
 '   \
http://127.0.0.1:9089/ima/v1/configuration/

The following example shows an example response to the POST method:


{        
  "Version": "v1",
  "Code": "CWLNA6011",
  "Message": "The requested configuration change has completed successfully."
}
You must complete the following tasks to finish the message hub configuration:
  1. Create endpoints.