mirror of
https://github.com/XRPLF/rippled.git
synced 2025-11-20 19:15:54 +00:00
0a0adaac6d
When the websocket connection is established, any configured administrative privileges are applied to resource limits.
81 lines
2.9 KiB
C++
81 lines
2.9 KiB
C++
//------------------------------------------------------------------------------
|
|
/*
|
|
This file is part of rippled: https://github.com/ripple/rippled
|
|
Copyright (c) 2012, 2013 Ripple Labs Inc.
|
|
|
|
Permission to use, copy, modify, and/or distribute this software for any
|
|
purpose with or without fee is hereby granted, provided that the above
|
|
copyright notice and this permission notice appear in all copies.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
ANY SPECIAL , DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
*/
|
|
//==============================================================================
|
|
|
|
#include <BeastConfig.h>
|
|
#include <ripple/server/Role.h>
|
|
|
|
namespace ripple {
|
|
|
|
bool
|
|
passwordUnrequiredOrSentCorrect (HTTP::Port const& port,
|
|
Json::Value const& params) {
|
|
|
|
assert(! port.admin_ip.empty ());
|
|
bool const passwordRequired = (!port.admin_user.empty() ||
|
|
!port.admin_password.empty());
|
|
|
|
return !passwordRequired ||
|
|
((params["admin_password"].isString() &&
|
|
params["admin_password"].asString() == port.admin_password) &&
|
|
(params["admin_user"].isString() &&
|
|
params["admin_user"].asString() == port.admin_user));
|
|
}
|
|
|
|
bool
|
|
ipAllowed (beast::IP::Address const& remoteIp,
|
|
std::vector<beast::IP::Address> const& adminIp)
|
|
{
|
|
return std::find_if (adminIp.begin (), adminIp.end (),
|
|
[&remoteIp](beast::IP::Address const& ip) { return ip.is_any () ||
|
|
ip == remoteIp; }) != adminIp.end ();
|
|
}
|
|
|
|
bool
|
|
isAdmin (HTTP::Port const& port, Json::Value const& params,
|
|
beast::IP::Address const& remoteIp)
|
|
{
|
|
return ipAllowed (remoteIp, port.admin_ip) &&
|
|
passwordUnrequiredOrSentCorrect (port, params);
|
|
}
|
|
|
|
Role
|
|
requestRole (Role const& required, HTTP::Port const& port,
|
|
Json::Value const& params, beast::IP::Endpoint const& remoteIp)
|
|
{
|
|
Role role (Role::GUEST);
|
|
if (isAdmin(port, params, remoteIp.address ()))
|
|
role = Role::ADMIN;
|
|
if (required == Role::ADMIN && role != required)
|
|
role = Role::FORBID;
|
|
return role;
|
|
}
|
|
|
|
Resource::Consumer
|
|
requestInboundEndpoint (Resource::Manager& manager,
|
|
beast::IP::Endpoint const& remoteAddress,
|
|
HTTP::Port const& port)
|
|
{
|
|
if (requestRole (Role::GUEST, port, Json::Value(), remoteAddress) ==
|
|
Role::ADMIN)
|
|
return manager.newAdminEndpoint (to_string (remoteAddress));
|
|
return manager.newInboundEndpoint(remoteAddress);
|
|
}
|
|
|
|
}
|