13 replies to this topic

[anudanan]

Today I've made a fix in OWIF

https://github.com/E...nWebif/pull/926

because the handling of transient user -sid works only if the transient user was created during a HTTP session of a user with a login shell. If you are on the box with HTTPs and use a login shell user, than the m3u file creation works but the follwing request with the url in the m3u file doesn´t work

 

With this fix it works

 

Now I´ve made a little test with streamproxy to use the -sid user for live transcoded streaming. If I comment out the passwd check in clientsocket.cpp and provide the -sid/pw user  in the /web/stream url, than it works fine and a usage of -sid is possible. Also the use of normal users for streaming works with this handling.

 

The idea maybe to use the check of OWIF for auth.

 

Only file streaming is an other stroy because that work without OWIF. To use -sid with filestreaming an idea maybe streamproxy may use a /web/stream url to check the -sid user but I don´t know which suffix after /web/stream is ok for ony passwd check

Edited by anudanan, 8 March 2019 - 10:08.

[littlesat]

I hope the owif people will not revert it...

[anudanan]

You mean my pull request?
I think they take the fix
It makes no sense that it only works with http login connections

It is also a problem for direct streaming over https with only OWIF an normal user logins which have a login shell

Edited by anudanan, 8 March 2019 - 10:52.

[ccs]

GitHub link doesn't work.

[anudanan]

It can access the link. Maybe the reason is my flagged useraccount in github. This is happened since two days and I have informed the GitHub supporz. Only users which are logged in on GitHub May see it

Sorry. I don‘t know why Ii am flagged

Edited by anudanan, 8 March 2019 - 11:09.

[anudanan]

Think link would work to see the changes
https://github.com/E...c82d8fd9e42ec87

Edited by anudanan, 8 March 2019 - 11:19.

[ccs]

That link works ok.

[Erik Slagter]

I am not quite sure how this PR/commit is related to streamproxy.

 

As said, as soon as the default audio selection stuff is complete (and the OWIF has accepted the required changes), I will fix all of the authentication stuff, including the use of -sid etc.

[anudanan]

This commit it not special for streamproxy. It fixes also the problem with direct recorded movie streaming over the OWIF port if a user starts this action from a HTTPS login, which is from my point of view the only way how a user should use OWIF from the Internet. That doesn´t work.

 

It is also neccessary to have this fix for using later -sid user with streamproxy if a user play the downloaded M3U file for streaming. If a user klicks the mobil icon from a HTTPS login the later auth check for the -sid user doesn´t work.

 

OWIF uses two site spaces. a site and a sslsite and the pw of the -sid comes from the space which is used for the normal login. But is the stream will start then OWIF must search in both spaces and not only in the site space as today.

[anudanan]

As said, as soon as the default audio selection stuff is complete (and the OWIF has accepted the required changes), I will fix all of the authentication stuff, including the use of -sid etc.

How is the idea to auth the -sid user. Is there a OWIF url to auth all users?

[Erik Slagter]

No there is not yet one, but as we come there, I will make a PR for one to OWIF. It's really simple. It needs to be an URL that requires authentication, even from localhost (comparable to web/stream) and does absolutely nothing, only report whether the authentication succeeded and store the authentication token (the "-sid" user). If we have that, it all becomes quite simple in streamproxy.

 

I want to have authentication separate from streaming because I want to have the option to have streamproxy do the full authentication itself. There is no obligation to use OWIF to start a transcoding session, you can just as well start a player with an url including the proper tcp port (eg 8002) and the proper service and off you go. It can also include authentication to be done against the password file or using a group. I insist this mechanism keeps working.

[anudanan]

That sounds very good.
I use streamproxy on both ways. From some apps with direct port access to the streamproxy ports and sometimes with vlc over the m3u filed OWIF

Edited by anudanan, 8 March 2019 - 19:39.

[anudanan]

The GitHub Support has. cleared my flagged user state. Now also the pullrequest link from the first post works

[anudanan]

I hope the owif people will not revert it...

 

They have merged it today

 

https://github.com/E...e00802eabde0f81

 

With this fix now the use of -sid users from streamproxy (after the integration in streamproxy) can work without problems afters HTTPS logins (which are recommended for loginshell users even from internet with portforwarding)

Edited by anudanan, 10 March 2019 - 00:43.