2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

mesh websocket auth: use X-Mesh-Secret

Browse source
This commit is contained in:
Laura Klünder 2023-12-04 23:09:27 +01:00
parent 4491f68dc7
commit 68d9d535c7
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/c3nav/mesh/consumers.py
View file

@ -59,8 +59,8 @@ class MeshConsumer(AsyncWebsocketConsumer):
async def connect(self): async def connect(self):
self.headers = dict(self.scope["headers"]) self.headers = dict(self.scope["headers"])
if not constant_time_compare(self.headers[b'authorization'].strip(), if not constant_time_compare(self.headers[b"X-Mesh-Secret"].strip(),
b'Bearer '+settings.SECRET_MESH_KEY.encode()): settings.SECRET_MESH_KEY.encode()):
raise DenyConnection raise DenyConnection
# await self.log_text(None, "new mesh websocket connection") # await self.log_text(None, "new mesh websocket connection")