legop3/MultiRoombaRover
1
0
Fork 0
mirror of https://github.com/legop3/MultiRoombaRover.git synced 2026-09-15 17:12:59 -04:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
legop3
2025-11-13 23:49:33 -05:00
parent fafc3e0312
commit 7195e257b8
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/src/services/videoAuthService.js
+9 -5
View File
@@ -20,16 +20,21 @@ function canView(socket) {
return true;
}
app.get('/mediamtx/auth', (req, res) => {
const { session: sessionId, roverId } = req.query;
app.post('/mediamtx/auth', (req, res) => {
const body = req.body || {};
const path = (body.path || '').replace(/^\//, '');
const params = new URLSearchParams(body.query || '');
const sessionId = params.get('session');
const roverId = path;
if (!sessionId || !roverId) {
logger.warn('auth missing session or rover');
logger.warn('auth missing session or rover (session=%s path=%s)', sessionId, path);
return res.status(401).end();
}
const info = videoSessions.getSession(sessionId);
if (!info || info.roverId !== roverId) {
logger.warn('invalid session %s', sessionId);
logger.warn('invalid session %s for rover %s', sessionId, roverId);
return res.status(401).end();
}
const socket = io.sockets.sockets.get(info.socketId);
@@ -40,7 +45,6 @@ app.get('/mediamtx/auth', (req, res) => {
if (!canView(socket)) {
return res.status(401).end();
}
// optionally ensure non-admin drivers only view their rover
const role = getRole(socket);
if (role !== 'spectator' && !isAdmin(socket)) {
if (!roverManager.isDriver(roverId, socket)) {