Method isWebSocketAuthorized

Source/Http/HttpServer.cpp:592–682

}

bool HttpServer::isWebSocketAuthorized(const std::string& resource) {
	if (!_authRequired) {
		return true;
	}
	if (_authToken.empty()) {
		return false;
	}
	if (_authTokenHasExpiry && std::chrono::steady_clock::now() > _authTokenExpiry) {
		_authToken.clear();
		_authSessionId.clear();
		_authSessionSecret.clear();
		_authTokenHasExpiry = false;
		return false;
	}
	if (_authSessionId.empty()) {
		auto token = get_query_param(resource, "auth"s);
		return isTokenValid(token);
	}
	auto params = parse_query_pairs(resource);
	std::string sessionId;
	std::string timestamp;
	std::string nonce;
	std::string signature;
	std::vector<std::pair<std::string, std::string>> signParams;
	signParams.reserve(params.size());
	for (const auto& param : params) {
		if (param.first == "session"s) {
			sessionId = param.second;
		} else if (param.first == "ts"s) {
			timestamp = param.second;
		} else if (param.first == "nonce"s) {
			nonce = param.second;
		} else if (param.first == "sig"s) {
			signature = param.second;
		} else {
			signParams.push_back(param);
		}
	}
	if (sessionId.empty() || timestamp.empty() || nonce.empty() || signature.empty()) {
		return false;
	}
	if (sessionId != _authSessionId) {
		return false;
	}
	long long tsValue = 0;
	try {
		tsValue = std::stoll(timestamp);
	} catch (...) {
		return false;
	}
	auto now = std::chrono::system_clock::now();
	auto nowSeconds = std::chrono::duration_cast<std::chrono::seconds>(now.time_since_epoch()).count();
	if (std::llabs(nowSeconds - tsValue) > AuthSignatureTTLSeconds) {
		return false;
	}
	auto pathEnd = resource.find('?');
	auto path = pathEnd == std::string::npos ? resource : resource.substr(0, pathEnd);
	signParams.emplace_back("nonce"s, nonce);