Outbox post authorization is on particular nicknames

master
Bob Mottram 2019-07-03 21:03:38 +01:00
parent f2c596ee2d
commit 503c423a18
1 changed files with 12 additions and 9 deletions

View File

@ -226,15 +226,18 @@ class PubServer(BaseHTTPRequestHandler):
self.server.POSTbusy=False
return
if self.path=='/outbox':
if self.headers.get('Authorization'):
if authorize(self.server.baseDir,self.headers['Authorization']):
# TODO
print('c2s posts not supported yet')
self.send_response(401)
self.end_headers()
self.server.POSTbusy=False
return
if self.path.endswith('/outbox'):
if '/users/' in self.path:
if self.headers.get('Authorization'):
nickname=self.path.split('/users/')[1].replace('/inbox','')
if nickname==nicknameFromBasicAuth(self.headers['Authorization']):
if authorize(self.server.baseDir,self.headers['Authorization']):
# TODO
print('c2s posts not supported yet')
self.send_response(401)
self.end_headers()
self.server.POSTbusy=False
return
self.send_response(401)
self.end_headers()
self.server.POSTbusy=False