Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Different approach to authentication #29

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

Different approach to authentication #29

wants to merge 6 commits into from

Commits on Apr 10, 2012

  1. Update XCode Project to Mac OS 10.7 and XCode 4.3.2 

    Also remove some obsolete build parameters (suggested by XCode)
    @v4lli
    v4lli committed Apr 10, 2012
    Configuration menu
    Copy the full SHA
    8eaeb40 View commit details
    Browse the repository at this point in the history

  2. Send base64 encoded security token in the HTTP-Header 

    This adds a new NSTextfield for a "secret key" which is sent with the
image's upload request.
OpenSSL is used to base64-encode the token, as a HTTP Header needs to be
7Bit ASCII clean, as per RFC1945.
    @v4lli
    v4lli committed Apr 10, 2012
    Configuration menu
    Copy the full SHA
    2ef2929 View commit details
    Browse the repository at this point in the history

  3. Make recv.php check for the secret 

    Use the $_SERVER array to get to the HTTP-Request-Header data.
    @v4lli
    v4lli committed Apr 10, 2012
    Configuration menu
    Copy the full SHA
    016353b View commit details
    Browse the repository at this point in the history

  4. Save the secret to the dictionary so it doesn't get lost on restarts

    @v4lli
    v4lli committed Apr 10, 2012
    Configuration menu
    Copy the full SHA
    682a0f9 View commit details
    Browse the repository at this point in the history

Commits on Apr 11, 2012

  1. Make it possible to return the http-link over HTTPS 

    This may be usefull to people with a self-signed SSL certificate, which
they themselves have marked as valid, but other people receiving the link might
not.
    @v4lli
    v4lli committed Apr 11, 2012
    Configuration menu
    Copy the full SHA
    4ebc064 View commit details
    Browse the repository at this point in the history

  2. Warn user about the security issue when using HTTP + Auth 

    The user may choose to re-edit the URL or ignore the error, for ever
(saved to NSUserDefaults).
    @v4lli
    v4lli committed Apr 11, 2012
    Configuration menu
    Copy the full SHA
    837d0db View commit details
    Browse the repository at this point in the history