Mirrors/OpenDTU
2
0
Fork 0
mirror of https://github.com/tbnobody/OpenDTU.git synced 2026-04-11 19:53:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Password protection for security settings API

Browse Source 
Also implemented the base functionallity to protect further API endpoints.
This commit is contained in:
Thomas Basler
2022-11-03 21:00:13 +01:00
parent af4b47beeb
commit 8d14dbd367
16 changed files with 295 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/WebApi.cpp
View File

@@ -5,6 +5,7 @@
#include "WebApi.h"
#include "ArduinoJson.h"
#include "AsyncJson.h"
#include "Configuration.h"
#include "defaults.h"
WebApiClass::WebApiClass()
@@ -55,4 +56,22 @@ void WebApiClass::loop()
_webApiWsLive.loop();
}
bool WebApiClass::checkCredentials(AsyncWebServerRequest* request)
{
CONFIG_T& config = Configuration.get();
if (request->authenticate(AUTH_USERNAME, config.Security_Password)) {
return true;
}
AsyncWebServerResponse* r = request->beginResponse(401);
// WebAPI should set the X-Requested-With to prevent browser internal auth dialogs
if (!request->hasHeader("X-Requested-With")) {
r->addHeader(F("WWW-Authenticate"), F("Basic realm=\"Login Required\""));
}
request->send(r);
return false;
}
WebApiClass WebApi;