Outbox post authorization is on particular nicknames

master
Bob Mottram 2019-07-03 21:03:38 +01:00
parent f2c596ee2d
commit 503c423a18
1 changed files with 12 additions and 9 deletions

View File

@ -226,8 +226,11 @@ class PubServer(BaseHTTPRequestHandler):
self.server.POSTbusy=False self.server.POSTbusy=False
return return
if self.path=='/outbox': if self.path.endswith('/outbox'):
if '/users/' in self.path:
if self.headers.get('Authorization'): if self.headers.get('Authorization'):
nickname=self.path.split('/users/')[1].replace('/inbox','')
if nickname==nicknameFromBasicAuth(self.headers['Authorization']):
if authorize(self.server.baseDir,self.headers['Authorization']): if authorize(self.server.baseDir,self.headers['Authorization']):
# TODO # TODO
print('c2s posts not supported yet') print('c2s posts not supported yet')