Feature Request: Dynamic Bridge Credentials via Plugin API

[danielmatteo]

Description
There is currently no way to provide or update bridge credentials dynamically using a Mosquitto plugin. Bridge authentication remains statically defined in the configuration file and cannot be modified at runtime.

Problem

• Bridge credentials are initialized once at broker startup and remain fixed.
• Plugins cannot override or update these credentials dynamically.

Technical Details

• Bridge connections use:

  mosq->bridge->remote_username

  instead of:

  mosq->username

• Calling:

  mosquitto_set_username()

  only updates context->username, and therefore has no effect on bridge authentication.

• The plugin API does not expose write access to:

  context->bridge->remote_username

• As a result, bridges continue using stale credentials even if a plugin attempts to update authentication context.

Expected Behavior / Proposal
Introduce a plugin-accessible API, for example:

mosquitto_set_bridge_credentials()

that allows setting or updating remote_username and remote_password dynamically.

Environment

• Mosquitto version: 2.1.2

Questions

• Is this limitation already addressed in a newer or upcoming release?
• If so, what version will include it and what is the expected timeline?

[danielmatteo]

I'll be working on this. Please assign to me

[danielmatteo]

#3688

[abiliojr]

In recent versions of mosquitto the bridge configuration can be reloaded (including those fields). The argument "bridge_reload_type" allows you to indicate whether you want the changes to take place in the next reconnection (lazy), or if you want them to change right away (which cycles the connection). It might satisfy your needs without adding new code.

[danielmatteo]

Thanks for the response Abilio. I wasn't familiar with the "bridge-reload-type" setting. We use an OAuth token for broker authentication. We did consider dynamically writing to mosquitto.conf "remote_username" and reloading the config but that would mean persisting the token in plaintext which is a security risk. Dan

…

________________________________ From: Abilio Marques ***@***.***> Sent: July 8, 2026 01:04 To: eclipse-mosquitto/mosquitto ***@***.***> Cc: danielmatteo ***@***.***>; Author ***@***.***> Subject: Re: [eclipse-mosquitto/mosquitto] Feature Request: Dynamic Bridge Credentials via Plugin API (Issue #3676) [https://avatars.githubusercontent.com/u/692657?s=20&v=4]abiliojr left a comment (eclipse-mosquitto/mosquitto#3676)<#3676 (comment)> In recent versions of mosquitto the bridge configuration can be reloaded (including those fields). The argument "bridge_reload_type" allows you to indicate whether you want the changes to take place in the next reconnection (lazy), or if you want them to change right away (which cycles the connection). It might satisfy your needs without adding new code. — Reply to this email directly, view it on GitHub<#3676?email_source=notifications&email_token=AL435QFYNQBKA5M7FPMSJUD5DXI47A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJRGE2TGOJYGQZKM4TFMFZW63VGMF2XI2DPOKSWK5TFNZ2KYZTPN52GK4S7MNWGSY3L#issuecomment-4911539842>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AL435QEAZH2INKII2NGKNAD5DXI47AVCNFSNUABEKJSXA33TNF2G64TZHM2TGNRRGQYTSMB3JFZXG5LFHM2DONBWGIZTKOBZGGQXMAQ>. Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS<https://github.com/notifications/mobile/ios/AL435QAF6JYTGLFC6RX3H5D5DXI47A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJRGE2TGOJYGQZKM4TFMFZW63VGMF2XI2DPOKSWK5TFNZ2KUZTPN52GK4S7NFXXG> and Android<https://github.com/notifications/mobile/android/AL435QGL77IFM3DZZOKJ53T5DXI47A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJRGE2TGOJYGQZKM4TFMFZW63VGMF2XI2DPOKSWK5TFNZ2K4ZTPN52GK4S7MFXGI4TPNFSA>. Download it today! You are receiving this because you authored the thread.Message ID: ***@***.***>

[NorbertHeusser]

There is a related PR-3436, which introduced a new API call to provide the bridge credentials from a plugin.

[danielmatteo]

There is a related PR-3436, which introduced a new API call to provide the bridge credentials from a plugin.

Thanks for showing me that PR. It would satisfy my requirements. Do you have any idea if and when it's going to make it in official Mosquitto release?

Also should I close my PR since it would be redundant if the other PR is merged.

[danielmatteo]

@ralight I see you've been active on this repo in the last months. Any idea when either this PR or #3436 can make it into an official release?