]> granicus.if.org Git - pdns/commit
API: Replace HTTP Basic auth with static key in custom header
authorChristian Hofstaedtler <christian@hofstaedtler.name>
Mon, 6 Oct 2014 21:51:01 +0000 (23:51 +0200)
committerPeter van Dijk <peter.van.dijk@netherlabs.nl>
Tue, 21 Oct 2014 12:00:44 +0000 (14:00 +0200)
commit5fe6dc07c2a28bc829f121b4fbcb7009cd627abb
tree61cce7bb6a990aebd301cc763d3150647e654ccf
parent4a95ab4d7443d3b6c843049614f689560627a054
API: Replace HTTP Basic auth with static key in custom header

Given that the key is sent in a custom header, this should prevent
any possible CSRF attacks.

Fixes #1769.
13 files changed:
pdns/common_startup.cc
pdns/docs/httpapi/README.md
pdns/docs/httpapi/api_spec.md
pdns/docs/pdns.xml
pdns/pdns.conf-dist
pdns/pdns_recursor.cc
pdns/webserver.cc
pdns/webserver.hh
pdns/ws-auth.cc
pdns/ws-recursor.cc
pdns/ws-recursor.hh
regression-tests.api/runtests.py
regression-tests.api/test_helper.py