Upstream/esphome
1
0
Fork 0
mirror of https://github.com/esphome/esphome.git synced 2025-03-09 12:59:29 +01:00
Code Issues Projects Releases Wiki Activity

Update cookie check logic

Browse Source
This commit is contained in:
Otto Winter 2018-11-23 21:14:42 +01:00
parent 73e95bc80f
commit 8433856fc9
No known key found for this signature in database
GPG Key ID: DB66C0BE6013F97E
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
esphomeyaml/dashboard/dashboard.py
View File

@ -44,12 +44,10 @@ HASSIO_MQTT_CONFIG = {}
# pylint: disable=abstract-method
class BaseHandler(tornado.web.RequestHandler):
def is_authenticated(self):
has_cookie = self.get_secure_cookie('authenticated') == 'yes'
if not USING_HASSIO_AUTH and not USING_PASSWORD:
return True
if USING_HASSIO_AUTH:
return has_cookie
return not USING_PASSWORD or has_cookie
return self.get_secure_cookie('authenticated') == 'yes'
# pylint: disable=abstract-method, arguments-differ
@ -60,11 +58,9 @@ class EsphomeyamlCommandWebSocket(tornado.websocket.WebSocketHandler):
self.closed = False
def on_message(self, message):
has_cookie = self.get_secure_cookie('authenticated') == 'yes'
if USING_PASSWORD and not has_cookie:
return
if ON_HASSIO and (USING_HASSIO_AUTH and not has_cookie):
return
if USING_HASSIO_AUTH or USING_PASSWORD:
if not self.get_secure_cookie('authenticated') == 'yes':
return
if self.proc is not None:
return
command = self.build_command(message)
@ -493,11 +489,15 @@ def start_web_server(args):
if not os.path.exists(CONFIG_DIR):
os.makedirs(CONFIG_DIR)
if args.hassio:
ON_HASSIO = True
ON_HASSIO = args.hassio
if ON_HASSIO:
USING_HASSIO_AUTH = not bool(os.getenv('DISABLE_HA_AUTHENTICATION'))
elif args.password:
USING_PASSWORD = True
USING_PASSWORD = False
else:
USING_HASSIO_AUTH = False
USING_PASSWORD = args.password
if USING_PASSWORD:
PASSWORD_DIGEST = hmac.new(args.password).digest()
if USING_HASSIO_AUTH or USING_PASSWORD: