MyFavMirrors/owntone-server
1
0
Fork 0
mirror of https://github.com/owntone/owntone-server.git synced 2024-12-28 16:15:57 -05:00
Code Issues Packages Projects Releases Wiki Activity

Authenticate Remote clients by their pairing-guid

Browse Source 
Remote clients have a waiver for HTTP authentication; they are authenticated
by their pairing-guid given during the pairing process.
This commit is contained in:
Julien BLACHE 2010-01-30 16:50:00 +01:00
parent 115d28e24a
commit e016ced119
1 changed files with 40 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
src/httpd_daap.c
View File

@ -782,7 +782,10 @@ daap_reply_content_codes(struct evhttp_request *req, struct evbuffer *evbuf, cha
static void static void
daap_reply_login(struct evhttp_request *req, struct evbuffer *evbuf, char **uri, struct evkeyvalq *query) daap_reply_login(struct evhttp_request *req, struct evbuffer *evbuf, char **uri, struct evkeyvalq *query)
{ {
struct pairing_info pi;
struct daap_session *s; struct daap_session *s;
const char *ua;
const char *guid;
int ret; int ret;
ret = evbuffer_expand(evbuf, 32); ret = evbuffer_expand(evbuf, 32);
@ -794,6 +797,43 @@ daap_reply_login(struct evhttp_request *req, struct evbuffer *evbuf, char **uri,
return; return;
} }
ua = evhttp_find_header(req->input_headers, "User-Agent");
if (!ua)
{
DPRINTF(E_LOG, L_DAAP, "No User-Agent header, rejecting login request\n");
evhttp_send_error(req, 403, "Forbidden");
return;
}
if (strncmp(ua, "Remote", strlen("Remote")) == 0)
{
guid = evhttp_find_header(query, "pairing-guid");
if (!guid)
{
DPRINTF(E_LOG, L_DAAP, "Login attempt with U-A: Remote and no pairing-guid\n");
evhttp_send_error(req, 403, "Forbidden");
return;
}
memset(&pi, 0, sizeof(struct pairing_info));
pi.guid = strdup(guid + 2); /* Skip leading 0X */
ret = db_pairing_fetch_byguid(&pi);
if (ret < 0)
{
DPRINTF(E_LOG, L_DAAP, "Login attempt with invalid pairing-guid\n");
free_pi(&pi, 1);
evhttp_send_error(req, 403, "Forbidden");
return;
}
DPRINTF(E_INFO, L_DAAP, "Remote '%s' logging in with GUID %s\n", pi.name, pi.guid);
free_pi(&pi, 1);
}
s = daap_session_register(); s = daap_session_register();
if (!s) if (!s)
{ {