2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

mesh websocket auth: use X-Mesh-Secret

Browse source
This commit is contained in:
Laura Klünder 2023-12-04 23:09:27 +01:00
parent 4491f68dc7
commit 68d9d535c7
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/c3nav/mesh/consumers.py
View file

@ -59,8 +59,8 @@ class MeshConsumer(AsyncWebsocketConsumer):
async def connect(self):
self.headers = dict(self.scope["headers"])
if not constant_time_compare(self.headers[b'authorization'].strip(),
b'Bearer '+settings.SECRET_MESH_KEY.encode()):
if not constant_time_compare(self.headers[b"X-Mesh-Secret"].strip(),
settings.SECRET_MESH_KEY.encode()):
raise DenyConnection
# await self.log_text(None, "new mesh websocket connection")