mdiluz/rove
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add basic account security

Browse source 
This adds a secret token associated with each account

	The token must then be sent with follow-up requests to ensure they get accepted

	This is _very_ basic security, and without TLS is completely vulnerable to MITM attacks, as well as brute force guessing (though it'd take a while to guess the a correct UUID)
This commit is contained in:
Marc Di Luzio 2020-07-07 22:20:23 +01:00
parent df30a0d689
commit 92222127a6
7 changed files with 413 additions and 232 deletions
Download patch file Download diff file Expand all files Collapse all files

20
proto/rove/rove.proto
View file

@ -74,7 +74,7 @@ message Command {
message CommandRequest {
// The account to execute these commands
string account = 1;
Account account = 1;
// The set of desired commands
repeated Command commands = 2;
@ -90,7 +90,7 @@ message Error {
message RadarRequest {
// The account for this request
string account = 1;
Account account = 1;
}
message RadarResponse {
@ -104,17 +104,20 @@ message RadarResponse {
bytes objects = 3;
}
// Empty placeholder
message RegisterResponse{}
message RegisterRequest {
// The desired account name
string name = 1;
}
// Empty placeholder
message RegisterResponse{
// The registered account information
Account account = 1;
}
message StatusRequest {
// The account for this request
string account = 1;
Account account = 1;
}
message StatusResponse {
@ -175,4 +178,9 @@ message ServerStatusResponse {
message Vector {
int32 x = 1;
int32 y = 2;
}
message Account {
string name = 1;
string secret = 2;
}