From: Jaroslav Kysela <perex@perex.cz>
Date: Sun, 21 Oct 2018 14:34:03 +0000 (+0200)
Subject: http: auth playlist, return unauthorized when the authcode is not present
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b7e8102ce0118c7028a7567153d986451c74460a;p=thirdparty%2Ftvheadend.git

http: auth playlist, return unauthorized when the authcode is not present
---

diff --git a/src/webui/webui.c b/src/webui/webui.c
index cde6d1cae..45f1c41e3 100644
--- a/src/webui/webui.c
+++ b/src/webui/webui.c
@@ -103,7 +103,7 @@ page_playlist_authpath(int urlauth)
   switch (urlauth) {
   case URLAUTH_NONE:    return "";
   case URLAUTH_TICKET:  return "/ticket";
-  case URLAUTH_CODE: return "/auth";
+  case URLAUTH_CODE:    return "/auth";
   default: assert(0);   return "";
   };
 }
@@ -1099,6 +1099,8 @@ static int
 page_http_playlist_auth
   (http_connection_t *hc, const char *remain, void *opaque)
 {
+  if (hc->hc_access == NULL || strempty(hc->hc_access->aa_auth))
+    return HTTP_STATUS_UNAUTHORIZED;
   return page_http_playlist_(hc, remain, opaque, URLAUTH_CODE);
 }
 
@@ -1583,6 +1585,8 @@ page_play_ticket(http_connection_t *hc, const char *remain, void *opaque)
 static int
 page_play_auth(http_connection_t *hc, const char *remain, void *opaque)
 {
+  if (hc->hc_access == NULL || strempty(hc->hc_access->aa_auth))
+    return HTTP_STATUS_UNAUTHORIZED;
   return page_play_(hc, remain, opaque, URLAUTH_CODE);
 }