mirrors/navidrome
1
0
Fork 0
mirror of https://github.com/navidrome/navidrome.git synced 2025-04-06 05:57:35 +03:00
Code Issues Projects Releases Packages Wiki Activity

Handling encoded passwords

Browse source
This commit is contained in:
Deluan 2016-03-09 21:05:23 -05:00
parent 61d96421dd
commit 031738f1eb
2 changed files with 31 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
api/validation.go
View file

@ -1,6 +1,9 @@
package api
import (
"encoding/hex"
"strings"
"github.com/astaxie/beego"
"github.com/deluan/gosonic/api/responses"
)
@ -31,7 +34,13 @@ func checkParameters(c ControllerInterface) {
func authenticate(c ControllerInterface) {
user := c.GetString("u")
pass := c.GetString("p") // TODO Handle hex-encoded password
pass := c.GetString("p")
if strings.HasPrefix(pass, "enc:") {
e := strings.TrimPrefix(pass, "enc:")
if dec, err := hex.DecodeString(e); err == nil {
pass = string(dec)
}
}
if user != beego.AppConfig.String("user") || pass != beego.AppConfig.String("password") {
abortRequest(c, responses.ERROR_AUTHENTICATION_FAIL)
}