protocol: check basic auth on ws connection

tsl0922 · Aug 8, 2021 · 1e5c524 · 1e5c524
1 parent 8a75364
commit 1e5c524
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/protocol.c b/src/protocol.c
@@ -155,6 +155,10 @@ int callback_tty(struct lws *wsi, enum lws_callback_reasons reason, void *user,
         lwsl_warn("refuse to serve WS client due to the --max-clients option.\n");
         return 1;
       }
+      if (server->credential != NULL) {
+        n = lws_hdr_copy(wsi, buf, sizeof(buf), WSI_TOKEN_HTTP_AUTHORIZATION);
+        if (n < 7 || !strstr(buf, "Basic ") || strcmp(buf +6, server->credential)) return 1;
+      }
 
       n = lws_hdr_copy(wsi, pss->path, sizeof(pss->path), WSI_TOKEN_GET_URI);
 #if defined(LWS_ROLE_H2)