Canithesis/checkpoint
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

handler: fix valid for taking ms

Browse Source
This commit is contained in:
Vaxry
2025-05-10 21:21:55 +01:00
parent 5afa967338
commit 5022e37917
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
example/config.jsonc
View File

@@ -83,6 +83,6 @@
"traffic_log_file": "./traffic.csv" "traffic_log_file": "./traffic.csv"
}, },
// how long the token (solved challenge) should be valid for before showing a new challenge, in minutes // how long the token (solved challenge) should be valid for before showing a new challenge, in seconds
"token_valid_for": 60 // 1 hour "token_valid_for": 3600 // 1 hour
} }

2
src/config/Config.hpp
View File

@@ -35,7 +35,7 @@ class CConfig {
bool trace_logging = false; bool trace_logging = false;
std::vector<SConfigRule> rules = {}; std::vector<SConfigRule> rules = {};
int default_challenge_difficulty = 4; int default_challenge_difficulty = 4;
int token_valid_for = 60; int token_valid_for = 3600;
bool async_proxy = true; bool async_proxy = true;
std::vector<SProxyRule> proxy_rules; std::vector<SProxyRule> proxy_rules;

4
src/core/Handler.cpp
View File

@@ -215,13 +215,13 @@ void CServerHandler::onRequest(const Pistache::Http::Request& req, Pistache::Htt
if (TOKEN.valid()) { if (TOKEN.valid()) {
const auto AGE = std::chrono::duration_cast<std::chrono::milliseconds>(std::chrono::system_clock::now().time_since_epoch()).count() - const auto AGE = std::chrono::duration_cast<std::chrono::milliseconds>(std::chrono::system_clock::now().time_since_epoch()).count() -
std::chrono::duration_cast<std::chrono::milliseconds>(TOKEN.issued().time_since_epoch()).count(); std::chrono::duration_cast<std::chrono::milliseconds>(TOKEN.issued().time_since_epoch()).count();
if (AGE <= g_pConfig->m_config.token_valid_for && TOKEN.fingerprint() == NRequestUtils::fingerprintForRequest(req)) { if (AGE <= g_pConfig->m_config.token_valid_for * 1000 && TOKEN.fingerprint() == NRequestUtils::fingerprintForRequest(req)) {
Debug::log(LOG, " | Action: PASS (token)"); Debug::log(LOG, " | Action: PASS (token)");
g_pTrafficLogger->logTraffic(req, "PASS (token)"); g_pTrafficLogger->logTraffic(req, "PASS (token)");
proxyPass(req, response); proxyPass(req, response);
return; return;
} else { // token has been used from a different IP or is expired. Nuke it. } else { // token has been used from a different IP or is expired. Nuke it.
if (AGE > g_pConfig->m_config.token_valid_for) if (AGE > g_pConfig->m_config.token_valid_for * 1000)
Debug::log(LOG, " | Action: CHALLENGE (token expired)"); Debug::log(LOG, " | Action: CHALLENGE (token expired)");
else else
Debug::log(LOG, " | Action: CHALLENGE (token fingerprint mismatch)"); Debug::log(LOG, " | Action: CHALLENGE (token fingerprint mismatch)");