allow use of X-Auth-ID and X-Auth-Key headers for authentication (vs …

…post data)
openbroadcaster · Aug 25, 2024 · a704c18 · a704c18
1 parent 130c474
commit a704c18
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/api.php b/api.php
@@ -158,8 +158,12 @@ public function __construct()
             }
         }
 
-        // try to get an ID/key pair for user authorization.
-        if (!empty($_POST['i']) && !empty($_POST['k'])) {
+        if (!empty($_SERVER['HTTP_X_AUTH_ID']) && !empty($_SERVER['HTTP_X_AUTH_KEY'])) {
+            // first check X-Auth-ID and X-Auth-Key headers for user authorization.
+            $auth_id = $_SERVER['HTTP_X_AUTH_ID'];
+            $auth_key = $_SERVER['HTTP_X_AUTH_KEY'];
+        } elseif (!empty($_POST['i']) && !empty($_POST['k'])) {
+            // next try i and k post data for user authorization.
             $auth_id = $_POST['i'];
             $auth_key = $_POST['k'];
         }