ctbrecuser
/
ctbrec
forked from j62/ctbrec
1
0
Fork 0
Code Pull Requests Activity

Protect only the playlists with HMAC 

Ignore HMAC authentication for segments, so that media players can
access the segments without the server having to manipulate the
playlist and add an hmac for every segment
This commit is contained in:
0xboobface 2018-11-16 12:42:33 +01:00
parent 917dbbadaa
commit d7ba8b2978
1 changed files with 14 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/main/java/ctbrec/recorder/server/HlsServlet.java
View File

@ -36,6 +36,8 @@ public class HlsServlet extends AbstractCtbrecServlet {
File recordingsDir = new File(config.getSettings().recordingsDir);
File requestedFile = new File(recordingsDir, request);
if (requestedFile.getCanonicalPath().startsWith(config.getSettings().recordingsDir)) {
if (requestedFile.getName().equals("playlist.m3u8")) {
try {
boolean isRequestAuthenticated = checkAuthentication(req, req.getRequestURI());
if (!isRequestAuthenticated) {
@ -51,9 +53,6 @@ public class HlsServlet extends AbstractCtbrecServlet {
return;
}
if (requestedFile.getCanonicalPath().startsWith(config.getSettings().recordingsDir)) {
if (requestedFile.getName().equals("playlist.m3u8")) {
try {
servePlaylist(req, resp, requestedFile);
} catch (ParseException | PlaylistException e) {