Method startReceiver

switch/source/transfer.cpp:555–605

}

bool Transfer::startReceiver(std::string& outError)
{
    {
        std::lock_guard<std::mutex> lock(g_receiverMutex);
        if (g_receiverRunning) {
            return true;
        }
    }
    if (Server::getAddress().empty()) {
        outError = "HTTP server not available.";
        return false;
    }

    g_failedAuthAttempts.store(0);
    // A 4-digit PIN from srand(time) is trivially predictable; seed from the
    // system CSPRNG so a LAN peer can't reconstruct it from the clock.
    int pin           = 1000 + (int)(randomGet64() % 9000);
    std::string token = StringUtils::format("%04d", pin);
    std::string ip    = Server::getAddress();
    setReceiverNotice("");
    setReceiverCompletedName("");
    g_receiverCompleted.store(false);
    g_completedTitleId.store(0);
    size_t pos = ip.find("://");
    if (pos != std::string::npos) {
        ip = ip.substr(pos + 3);
    }
    pos = ip.find(":");
    if (pos != std::string::npos) {
        ip = ip.substr(0, pos);
    }

    // Publish token/ip/port before the handler is reachable, so an upload that
    // arrives the instant it registers validates against the real token.
    {
        std::lock_guard<std::mutex> lock(g_receiverMutex);
        g_token        = token;
        g_receiverIp   = ip;
        g_receiverPort = TRANSFER_PORT;
    }

    Server::registerHandler("/transfer/info", handleInfo);
    Server::registerUploadHandler("/transfer/upload", TEMP_UPLOAD, handleUpload);

    {
        std::lock_guard<std::mutex> lock(g_receiverMutex);
        g_receiverRunning = true;
    }

    return true;
}

void Transfer::stopReceiver(void)
{