apps/core
1
0
Fork 0
mirror of https://github.com/datarhei/core.git synced 2025-10-05 16:07:07 +08:00
Code Issues Packages Projects Releases Wiki Activity

user only for api:

Browse Source
This commit is contained in:
Ingo Oppermann
2023-02-17 10:30:38 +01:00
parent 1e74f11f5e
commit ad4f392bd0
2 changed files with 7 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/api/api.go
View File

@@ -451,7 +451,6 @@ func (a *api) start() error {
iam.AddPolicy("$anon", "$none", "api:/api", "GET|HEAD|OPTIONS") iam.AddPolicy("$anon", "$none", "api:/api", "GET|HEAD|OPTIONS")
iam.AddPolicy("$anon", "$none", "api:/api/v3/widget/process/**", "GET|HEAD|OPTIONS") iam.AddPolicy("$anon", "$none", "api:/api/v3/widget/process/**", "GET|HEAD|OPTIONS")
iam.AddPolicy("$localhost", "$none", "fs:/**", "GET|HEAD|OPTIONS")
iam.AddPolicy("$localhost", "$none", "api:/api", "GET|HEAD|OPTIONS") iam.AddPolicy("$localhost", "$none", "api:/api", "GET|HEAD|OPTIONS")
iam.AddPolicy("$localhost", "$none", "api:/api/v3/widget/process/**", "GET|HEAD|OPTIONS") iam.AddPolicy("$localhost", "$none", "api:/api/v3/widget/process/**", "GET|HEAD|OPTIONS")
@@ -469,7 +468,6 @@ func (a *api) start() error {
if !cfg.Storage.Memory.Auth.Enable { if !cfg.Storage.Memory.Auth.Enable {
iam.AddPolicy("$anon", "$none", "fs:/memfs/**", "ANY") iam.AddPolicy("$anon", "$none", "fs:/memfs/**", "ANY")
iam.AddPolicy("$localhost", "$none", "fs:/memfs/**", "ANY")
} }
if cfg.RTMP.Enable && len(cfg.RTMP.Token) == 0 { if cfg.RTMP.Enable && len(cfg.RTMP.Token) == 0 {

15
http/middleware/iam/iam.go
View File

@@ -111,6 +111,7 @@ func NewWithConfig(config Config) echo.MiddlewareFunc {
var identity iam.IdentityVerifier = nil var identity iam.IdentityVerifier = nil
var err error var err error
username := "$anon"
resource := c.Request().URL.Path resource := c.Request().URL.Path
var domain string var domain string
@@ -152,6 +153,11 @@ func NewWithConfig(config Config) echo.MiddlewareFunc {
} }
} }
ip := c.RealIP()
if ip == "127.0.0.1" || ip == "::1" {
username = "$localhost"
}
domain = c.QueryParam("group") domain = c.QueryParam("group")
resource = "api:" + resource resource = "api:" + resource
} else { } else {
@@ -164,14 +170,7 @@ func NewWithConfig(config Config) echo.MiddlewareFunc {
resource = "fs:" + resource resource = "fs:" + resource
} }
username := "$anon" if identity != nil {
if identity == nil {
ip := c.RealIP()
if ip == "127.0.0.1" || ip == "::1" {
username = "$localhost"
}
} else {
username = identity.Name() username = identity.Name()
} }