pegasus/anope
1
0
Fork 0
mirror of https://github.com/anope/anope.git synced 2026-07-05 20:23:11 +02:00
Code Activity

Add support for bearer tokens for authorising with RPC.

Browse Source
This commit is contained in:
Sadie Powell
2025-05-04 14:14:19 +01:00
parent 0b2b00b37d
commit 4b854d3935
5 changed files with 124 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/extra/xmlrpc.cpp
+25 -1
View File
@@ -93,6 +93,17 @@ public:
request.name = method;
delete method;
if (!tokens.empty())
{
auto it = message.headers.find("Authorization");
if (it == message.headers.end() || !CanExecute(it->second, request.name))
{
xmlrpc_env_set_fault(&env, RPC::ERR_METHOD_NOT_FOUND, "No authorization for method");
SendError(reply, env);
return true;
}
}
ServiceReference<RPC::Event> event(RPC_EVENT, request.name);
if (!event)
{
@@ -308,8 +319,21 @@ public:
this->httpref = ServiceReference<HTTPProvider>("HTTPProvider", modconf.Get<const Anope::string>("server", "httpd/main"));
if (!httpref)
throw ConfigException("Unable to find http reference, is httpd loaded?");
httpref->RegisterPage(&xmlrpcinterface);
xmlrpcinterface.tokens.clear();
for (int i = 0; i < modconf.CountBlock("token"); ++i)
{
const auto &block = modconf.GetBlock("token", i);
const auto &token = block.Get<const Anope::string>("token");
if (!token.empty())
{
std::vector<Anope::string> methods;
spacesepstream(block.Get<const Anope::string>("methods")).GetTokens(methods);
xmlrpcinterface.tokens.emplace(token, methods);
}
}
httpref->RegisterPage(&xmlrpcinterface);
}
};