From 68d9d535c76f00263abb6154cf33af6cca1bba57 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Laura=20Kl=C3=BCnder?= Date: Mon, 4 Dec 2023 23:09:27 +0100 Subject: [PATCH] mesh websocket auth: use X-Mesh-Secret --- src/c3nav/mesh/consumers.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/c3nav/mesh/consumers.py b/src/c3nav/mesh/consumers.py index b4a74729..9cef2e4c 100644 --- a/src/c3nav/mesh/consumers.py +++ b/src/c3nav/mesh/consumers.py @@ -59,8 +59,8 @@ class MeshConsumer(AsyncWebsocketConsumer): async def connect(self): self.headers = dict(self.scope["headers"]) - if not constant_time_compare(self.headers[b'authorization'].strip(), - b'Bearer '+settings.SECRET_MESH_KEY.encode()): + if not constant_time_compare(self.headers[b"X-Mesh-Secret"].strip(), + settings.SECRET_MESH_KEY.encode()): raise DenyConnection # await self.log_text(None, "new mesh websocket connection")