administrator/frigate
1
0
Fork 0
mirror of https://github.com/blakeblackshear/frigate.git synced 2026-02-18 00:54:27 +03:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Enable forms based auth and proxy auth

Browse Source
This commit is contained in:
lucas_nz 2024-12-12 11:27:07 +13:00
parent 2461d01329
commit fad2e5c1b5
1 changed files with 22 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
frigate/api/auth.py
View File

@ -180,6 +180,12 @@ def auth():
fail_response = make_response({}, 401) fail_response = make_response({}, 401)
# if the request is coming from a proxy with a auth header attempt header auth
if (
auth_config.trusted_proxies is not None
and proxy_config.header_map.user is not None
and proxy_config.header_map.user in request.headers
):
# ensure the proxy secret matches if configured # ensure the proxy secret matches if configured
if ( if (
proxy_config.auth_secret is not None proxy_config.auth_secret is not None
@ -189,18 +195,16 @@ def auth():
logger.debug("X-Proxy-Secret header does not match configured secret value") logger.debug("X-Proxy-Secret header does not match configured secret value")
return fail_response return fail_response
# if auth is disabled, just apply the proxy header map and return success
if not auth_config.enabled:
# pass the user header value from the upstream proxy if a mapping is specified
# or use anonymous if none are specified
if proxy_config.header_map.user is not None:
upstream_user_header_value = request.headers.get( upstream_user_header_value = request.headers.get(
proxy_config.header_map.user, proxy_config.header_map.user,
type=str, type=str,
default="anonymous", default="anonymous",
) )
success_response.headers["remote-user"] = upstream_user_header_value success_response.headers["remote-user"] = upstream_user_header_value
else: return success_response
# if auth is disabled, return success
if not auth_config.enabled:
success_response.headers["remote-user"] = "anonymous" success_response.headers["remote-user"] = "anonymous"
return success_response return success_response