Function handle_ui_readiness

src/ui/http_server.c:1751–1785

}

static void handle_ui_readiness(cbm_http_server_t *srv, cbm_http_conn_t *c,
                                const cbm_http_req_t *req) {
    if (!srv->readiness_secret_set) {
        cbm_http_replyf(c, 503, "Cache-Control: no-store\r\n", "%s", "readiness proof unavailable");
        return;
    }
    char challenge_hex[CBM_SHA256_HEX_LEN + 1U];
    uint8_t challenge[CBM_SHA256_DIGEST_LEN];
    static const char prefix[] = "challenge=";
    if (strncmp(req->query, prefix, sizeof(prefix) - 1U) != 0 ||
        strlen(req->query) != sizeof(prefix) - 1U + CBM_SHA256_HEX_LEN) {
        cbm_http_replyf(c, 400, "Cache-Control: no-store\r\n", "%s", "invalid challenge");
        return;
    }
    memcpy(challenge_hex, req->query + sizeof(prefix) - 1U, CBM_SHA256_HEX_LEN);
    challenge_hex[CBM_SHA256_HEX_LEN] = '\0';
    if (!readiness_hex_decode(challenge_hex, challenge)) {
        cbm_secure_zero(challenge, sizeof(challenge));
        cbm_http_replyf(c, 400, "Cache-Control: no-store\r\n", "%s", "invalid challenge");
        return;
    }
    uint8_t proof[CBM_SHA256_DIGEST_LEN];
    char proof_hex[CBM_SHA256_HEX_LEN + 1U];
    cbm_hmac_sha256(srv->readiness_secret, sizeof(srv->readiness_secret), challenge,
                    sizeof(challenge), proof);
    readiness_hex_encode(proof, proof_hex);
    cbm_http_replyf(c, 200,
                    "Content-Type: text/plain; charset=utf-8\r\n"
                    "Cache-Control: no-store\r\n"
                    "X-Content-Type-Options: nosniff\r\n",
                    "%s", proof_hex);
    cbm_secure_zero(challenge, sizeof(challenge));
    cbm_secure_zero(proof, sizeof(proof));
    cbm_secure_zero(proof_hex, sizeof(proof_hex));
}

static bool request_passes_http_security(cbm_http_server_t *srv, cbm_http_conn_t *c,
                                         const cbm_http_req_t *req) {