You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

George Joseph cedce459c1 res_ari: Ensure read-only users are properly authorized via REST Over WebSocket. ... The REST over WebSocket path now properly prevents non-GET methods from being executed on inbound WebSockets. * The query parameters from the original incoming GET request that caused the upgrade to WebSocket are now passed to all REST requests that come from the client. This ensures that if the client authenticated with a read-only userid using the "api_key" query_string parameter, REST requests coming in over the WebSocket will only be able to execute GETs on resources. The HTTP headers were already passed to the REST requests so if the client had authenticated via an "Authorization" it was properly handled. * New tests have been added to test_ari.c to check that read-only users are properly denied access to resources using non-GET methods. Several memory leaks were also squashed. Resolves: #GHSA-wcvv-g26m-wx5c		2 months ago
..
ari_doc.xml	acl: Add ACL support to http and ari	2 months ago
ari_model_validators.c	ARI Outbound Websockets	1 year ago
ari_model_validators.h	ARI Outbound Websockets	1 year ago
ari_websocket_requests.c	res_ari: Ensure read-only users are properly authorized via REST Over WebSocket.	2 months ago
ari_websockets.c	res_ari: Ensure read-only users are properly authorized via REST Over WebSocket.	2 months ago
ari_websockets.h	res_ari: Ensure read-only users are properly authorized via REST Over WebSocket.	2 months ago
cli.c	acl: Add ACL support to http and ari	2 months ago
config.c	acl: Add ACL support to http and ari	2 months ago
internal.h	acl: Add ACL support to http and ari	2 months ago
resource_applications.c	res_ari_applications: Fix incorrect call to ao2_lock.	8 years ago
resource_applications.h	…
resource_asterisk.c	…
resource_asterisk.h	…
resource_bridges.c	bridging: Fix multiple bridging issues causing SEGVs and FRACKs.	2 years ago
resource_bridges.h	bridging: Fix multiple bridging issues causing SEGVs and FRACKs.	2 years ago
resource_channels.c	ARI: Add command to indicate progress to a channel	1 year ago
resource_channels.h	ARI: Add command to indicate progress to a channel	1 year ago
resource_device_states.c	…
resource_device_states.h	…
resource_endpoints.c	core/ari/pjsip: Add refer mechanism	3 years ago
resource_endpoints.h	rest-api: Run make ari-stubs	3 years ago
resource_events.c	ARI: REST over Websocket	1 year ago
resource_events.h	ARI: REST over Websocket	1 year ago
resource_mailboxes.c	…
resource_mailboxes.h	…
resource_playbacks.c	…
resource_playbacks.h	…
resource_recordings.c	…
resource_recordings.h	…
resource_sounds.c	…
resource_sounds.h	…