hydrar/mistserver
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Implement API websocket auth

Browse source
This commit is contained in:
Thulinma 2024-06-20 13:28:34 +02:00
parent f7b274ec71
commit 3c64d67b4f
2 changed files with 38 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

47
src/controller/controller_api.cpp
View file

@ -189,7 +189,7 @@ public:
std::string tags;
};
void Controller::handleWebSocket(HTTP::Parser &H, Socket::Connection &C){
void Controller::handleWebSocket(HTTP::Parser &H, Socket::Connection &C, bool authorized){
std::string logs = H.GetVar("logs");
std::string accs = H.GetVar("accs");
bool doStreams = H.GetVar("streams").size();
@ -198,6 +198,41 @@ void Controller::handleWebSocket(HTTP::Parser &H, Socket::Connection &C){
HTTP::Websocket W(C, req, H);
if (!W){return;}
if (authorized){
W.sendFrame("[\"auth\", true]");
}else{
W.sendFrame("[\"auth\", false]");
C.setBlocking(false);
}
uint64_t authTime = Util::bootMS();
while (!authorized && W){
if (W.readFrame()){
//only handle text frames
if (W.frameType != 1){continue;}
//Parse JSON and check command type
JSON::Value command = JSON::fromString(W.data, W.data.size());
if (command.isArray() && command[0u].asString() == "auth"){
tthread::lock_guard<tthread::mutex> guard(configMutex);
JSON::Value req;
req["authorize"] = command[1u];
authorized = authorize(req, req, C);
W.sendFrame("[\"auth\", "+req["authorize"].toString()+"]");
}
}
Util::sleep(100);
if (Util::bootMS() > authTime + 10000){
W.sendFrame("[\"auth\",\"Too slow, sorry\"]");
C.close();
}
}
if (!authorized || !W || !C){return;}
C.setBlocking(true);
IPC::sharedPage shmLogs(SHM_STATE_LOGS, 1024 * 1024);
IPC::sharedPage shmAccs(SHM_STATE_ACCS, 1024 * 1024);
IPC::sharedPage shmStreams(SHM_STATE_STREAMS, 1024 * 1024);
@ -364,15 +399,7 @@ int Controller::handleAPIConnection(Socket::Connection &conn){
}
// Catch websocket requests
if (H.url == "/ws"){
if (!authorized){
H.Clean();
H.body = "Please login first or provide a valid token authentication.";
H.SetHeader("Server", APPIDENT);
H.SendResponse("403", "Not authorized", conn);
H.Clean();
continue;
}
handleWebSocket(H, conn);
handleWebSocket(H, conn, authorized);
H.Clean();
continue;
}

2
src/controller/controller_api.h
View file

@ -7,6 +7,6 @@ namespace Controller{
bool authorize(JSON::Value &Request, JSON::Value &Response, Socket::Connection &conn);
int handleAPIConnection(Socket::Connection &conn);
void handleAPICommands(JSON::Value &Request, JSON::Value &Response);
void handleWebSocket(HTTP::Parser &H, Socket::Connection &C);
void handleWebSocket(HTTP::Parser &H, Socket::Connection &C, bool authorized);
void handleUDPAPI(void *np);
}// namespace Controller