update

broker/src/main/java/io/moquette/BrokerConstants.java

@@ -101,6 +101,7 @@ public final class BrokerConstants {
     public static final String HZ_Cluster_Node_ID = "node_id";
     public static final String HTTP_SERVER_SECRET_KEY = "http.admin.secret_key";
     public static final String CLIENT_PROTO_SECRET_KEY = "client.proto.secret_key";
+    public static final String TOKEN_SECRET_KEY = "token.key ";
 
     public static final String EMBED_DB_PROPERTY_NAME = "embed.db";
 

broker/src/main/java/io/moquette/server/Server.java

@@ -38,6 +38,7 @@ import io.moquette.spi.impl.security.AES;
 import io.moquette.spi.security.IAuthenticator;
 import io.moquette.spi.security.IAuthorizator;
 import io.moquette.spi.security.ISslContextCreator;
+import io.moquette.spi.security.Tokenor;
 import io.netty.util.ResourceLeakDetector;
 import win.liyufan.im.DBUtil;
 
@@ -379,6 +380,7 @@ public class Server {
         hazelcastInstance.getCluster().getLocalMember().setStringAttribute(HZ_Cluster_Node_External_Short_Port, shortPort);
         hazelcastInstance.getCluster().getLocalMember().setIntAttribute(HZ_Cluster_Node_ID, nodeId);
         hazelcastInstance.getCluster().getLocalMember().setStringAttribute(HZ_Cluster_Node_External_IP, serverIp);
+        Tokenor.setKey(config.getProperty(BrokerConstants.TOKEN_SECRET_KEY));
         RPCCenter.getInstance().init(this);
         return true;
     }

broker/src/main/java/io/moquette/spi/security/Tokenor.java

@@ -1,10 +1,17 @@
 package io.moquette.spi.security;
 
 
+import com.hazelcast.util.StringUtil;
 import io.moquette.spi.impl.security.AES;
 
 public class Tokenor {
-	private static final String KEY = "testim";
+	private static String KEY = "testim";
+
+	public static void setKey(String key) {
+	    if (!StringUtil.isNullOrEmpty(key)) {
+            KEY = key;
+        }
+    }
 
     public static String getUserId(byte[] password) {
         try {