Firmware, No Authentication for the Broker

[Yhya99]

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

No Authentication for the Broker Messages.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

[ForrestErickson]

Authentication means to Lee that with our a User_Name and a PassWord messages cannot be published to the topic to which the Krake is subscribed and publishing.

User_Name and a PassWord must be exchanged using secure methods.

References

For an article with definitions on “authentication and authorization” see:
https://www.hivemq.com/blog/mqtt-essentials-part-3-client-broker-connection-establishment/

[Yhya99]

Library Mongoose has a useful example to use JSON-RPC over MQTT here
https://github.com/cesanta/mongoose/tree/master/tutorials/mqtt/mqtt-dashboard
that's have the net.c files that handle the JSON-RPC Methods
for example from the reference net.c

static void publish_status(struct mg_connection *c) {
  char topic[100];
  struct mg_mqtt_opts pub_opts;
  struct mg_iobuf io = {0, 0, 0, 512};

  // Print JSON notification into the io buffer
  mg_xprintf(
      mg_pfn_iobuf, &io,
      "{%m:%m,%m:{%m:%m,%m:%s,%m:%m}}",                                    //
      MG_ESC("method"), MG_ESC("status.notify"), MG_ESC("params"),         //
      MG_ESC("status"), MG_ESC("online"),                                  //
      MG_ESC("led_status"), s_device_state.led_status ? "true" : "false",  //
      MG_ESC("firmware_version"), MG_ESC(s_device_state.firmware_version));

  memset(&pub_opts, 0, sizeof(pub_opts));
  mg_snprintf(topic, sizeof(topic), "%s/%s/status", g_root_topic, g_device_id);
  pub_opts.topic = mg_str(topic);
  pub_opts.message = mg_str_n((char *) io.buf, io.len);
  pub_opts.qos = s_qos;
  pub_opts.retain = true;
  mg_mqtt_pub(c, &pub_opts);
  mg_iobuf_free(&io);
}

and here is a video that's explain this example : https://www.youtube.com/watch?v=kUZAp3PuEF8

It maybe will be helpful for implementing authorization and authentication mechanism using the JSON-RPC over the MQTT

i have make a repo trying to implementing a mechanism for the authorization and authentication MQTT_Gateway

[ForrestErickson]

See also about self hosted MQTT Brokers for LAN (Intranet) user (Not internet).
Googled: "ESP32 mqtt broker library"

[ForrestErickson]

Lee googled, "what is json-rpc and how is it used for authentication"
and the AI came back with this below suggesting that we should be thinking of how to do authentication at another "level". That it is some kind of transport layer not the payload. (I think json-rpc is a payload).