feat: support Bearer authentication for SRS and proxy APIs. v8.0.28 - #4726
Merged
Conversation
Require an explicit basic authentication type whenever HTTP API authentication is enabled, and update tests, sample configuration, and documentation for SRS_HTTP_API_AUTH_TYPE. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
Add Bearer token authentication for the SRS HTTP API and proxy origin registration, including authenticated heartbeat requests, configuration validation, tests, integration coverage, documentation, and Basic/Bearer sample configurations. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
winlinvip
changed the title
winlinvip
changed the title
Synchronize the Go and C++ revision constants and add the changelog entry for Bearer HTTP API authentication in PR ossrs#4726. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
Separate Basic and Bearer validation into scheme-specific authenticators and let the HTTP auth mux depend on a stable strategy interface instead of scheme-specific parameters. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
Apply Bearer authentication to WHIP, WHEP, and other WebRTC signaling APIs while keeping Basic authentication limited to /api/. Add focused and end-to-end coverage and document how Bearer authentication composes with WebRTC HTTP callbacks. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
Move environment validation onto the concrete proxy environment and wrap the SRS registration endpoint with private Bearer authentication middleware. Add focused unit coverage for validation and middleware behavior. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
Rename the system API middleware to withHTTPAPIAuth to reflect its wrapper behavior, and update the focused unit test accordingly. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
Add the rtc_bearer_enabled configuration and environment switch, validate its Bearer-only requirements, and keep HTTP API Bearer authentication enabled independently. Update unit coverage, integration setup, examples, and documentation for WHIP/WHEP and HTTP callback authorization. --------- Co-authored-by: chatgpt-codex-connector[bot] <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fix #4690
SRS_HTTP_API_AUTH_TYPEwhen SRS HTTP API authentication is enabled.PROXY_HTTP_API_AUTH_*.SRS_HEARTBEAT_AUTH_*.