Mirrors/cobalt
1
0
Fork 0
mirror of https://github.com/wukko/cobalt.git synced 2024-06-29 10:26:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

stream/manage: fix and clean up verifyStream function (#397)

Browse source
This commit is contained in:
wukko 2024-03-22 22:52:04 +06:00 committed by GitHub
parent 9234581c5e 2ce033b754
commit 3ec04bd7c5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 23 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
src/modules/stream/manage.js
View file

@ -5,6 +5,15 @@ import { nanoid } from 'nanoid';
import { decryptStream, encryptStream, generateHmac } from "../sub/crypto.js";
import { streamLifespan } from "../config.js";
const streamNoAccess = {
error: "i couldn't verify if you have access to this stream. go back and try again!",
status: 401
}
const streamNoExist = {
error: "this download link has expired or doesn't exist. go back and try again!",
status: 400
}
const streamCache = new NodeCache({
stdTTL: streamLifespan/1000,
checkperiod: 10,
@ -61,29 +70,24 @@ export function createStream(obj) {
export function verifyStream(id, hmac, exp, secret, iv) {
try {
const ghmac = generateHmac(`${id},${exp},${iv},${secret}`, hmacSalt);
const cache = streamCache.get(id.toString());
if (ghmac !== String(hmac)) {
return {
error: "i couldn't verify if you have access to this stream. go back and try again!",
status: 401
}
}
if (ghmac !== String(hmac)) return streamNoAccess;
if (!cache) return streamNoExist;
const streamInfo = JSON.parse(decryptStream(streamCache.get(id.toString()), iv, secret));
if (!streamInfo) return {
error: "this download link has expired or doesn't exist. go back and try again!",
status: 400
}
const streamInfo = JSON.parse(decryptStream(cache, iv, secret));
if (String(exp) === String(streamInfo.exp) && Number(exp) > new Date().getTime()) {
return streamInfo;
}
if (!streamInfo) return streamNoExist;
if (Number(exp) <= new Date().getTime())
return streamNoExist;
return streamInfo;
}
catch (e) {
return {
error: "i couldn't verify if you have access to this stream. go back and try again!",
status: 401
error: "something went wrong and i couldn't verify this stream. go back and try again!",
status: 500
}
} catch (e) {
return { status: 500, body: { status: "error", text: "couldn't verify this stream. request a new one!" } };
}
}