Academy · IoT.Factora · Technology · 18 min

Security model

Tokens, topic ACL, RBAC, paused plants, rate limits. MQTT TLS is not claimed.

Security model

Ingest

Device ingest token (shown to admin on the device page; rotatable)
MQTT password = that token; username = device code
Allowed topic: factora/{that factory slug}/devices/{that device code}/telemetry
HTTP ingest: 180 requests / minute / IP+token prefix; login: 8 / 10 minutes

Sessions

Plant cookie is HttpOnly, Secure on HTTPS. AUTHSECRET must not equal POSTGRESPASSWORD. Ops viewer cannot create factories or enter plants.

Tenant

Paused factory → plant login 403. Onboarding: plant exists, simulator does not tick.

Honest gaps

MQTT TLS is not the current production claim. OPC native driver is not bundled. Do not write those into architecture slides.

Check understanding

Progress is stored in this browser only. Passing is 70%.

1. MQTT topic for demo-food device CR-01 isfactora/demo-food/devices/CR-01/telemetry#factory/+/temperatureCR-01

2. Ops viewer can enter a plant as admin.TrueFalse