search

pebbe / zmq4

A Go interface to ZeroMQ version 4
BSD 2-Clause "Simplified" License
1.17k stars 163 forks source link

AuthCurveRemove does not disconnect peers immediately #143

Open ghost opened 5 years ago

ghost commented 5 years ago

An authorized peer/client's key is removed with AuthCurveRemove. The peer/client is still able to send data until the server is stopped and restarted. Shouldn't removing credentials have the effect of blocking the now-unauthorized peer/client immediately?

pebbe commented 5 years ago

AuthCurveRemove only removes the ability to authenticate. If you want to remove the authorization as well, you need to close the socket.

ghost commented 5 years ago

Couldn't this be considered a problem? When I deauthorize a client, I'll have to disconnect (potentially dozens) of other clients just to ensure the deauthorized client can no longer send data.