Import strings package

Indiepaper uses Authorization header for source_id
- Check author for source_id / auth token
2018-07-03 23:01:39 +02:00 · 2018-07-03 22:59:07 +02:00
1 changed files with 6 additions and 0 deletions
--- a/cmd/eksterd/micropub.go
+++ b/cmd/eksterd/micropub.go
@ -6,6 +6,7 @@ import (
 	"fmt"
 	"log"
 	"net/http"
+	"strings"

 	"github.com/garyburd/redigo/redis"
 	"github.com/pstuifzand/ekster/microsub"
@ -31,6 +32,11 @@ func (h *micropubHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	if r.Method == http.MethodPost {
 		sourceID := r.URL.Query().Get("source_id")

+		authHeader := r.Header.Get("Authorization")
+		if strings.HasPrefix(authHeader, "Bearer ") {
+			sourceID = authHeader[7:]
+		}
+
 		channel, err := redis.String(conn.Do("HGET", "sources", sourceID))
 		if err != nil {
 			http.Error(w, "Unknown source", 400)
Author	SHA1	Message	Date
Peter Stuifzand	2e83a023f5	Import strings package	2018-07-03 23:01:39 +02:00
Peter Stuifzand	9625549a5f	Indiepaper uses Authorization header for source_id - Check author for source_id / auth token	2018-07-03 22:59:07 +02:00