Seems to be out of date with 3.1.x

[jar349]

I can see in my server logs that I'm getting (quite a few) calls to /user?username=&password= and "allow administrator management" is getting passed back. This is allowing me to gain access to the administrative web application.

When I attempt to create an exchange, I'm told that I don't have access to virtual host "/", and there's no call to vhost_path in my logs.

Nor is there ever a call to resource_path.

My assumption is that the security API in the 3.1.x release has changed, causing your plugin not to be called for vhost_path and resource_path operations.

What do you recommend that I do?

[simonmacmullen]

I don't believe the API has changed. I assume when you say "in my logs" you mean the web server logs. What is in the RabbitMQ logs?

[jar349]

Here is what my problem was:

I created my endpoints at: /user_path /vhost_path /resource_path

I needed to create them at: /user /vhost /resource