v0.4.18: protección anti-secuestro de ID en el relay de internet
relay.rs envía al relay una huella SHA-256 del client_token al registrar el ID de 8 dígitos, en vez del token en texto plano. Permite que el relay (gradio-relay, cambio complementario ya desplegado en relay.gradio.net) rechace un re-registro de un ID activo cuando la huella no coincide, cerrando la ventana para que un tercero que conozca el ID intercepte el token de un cliente remoto suplantando a la estación real.
This commit is contained in:
Generated
+13
-1
@@ -1591,7 +1591,7 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
|
||||
|
||||
[[package]]
|
||||
name = "radio-player"
|
||||
version = "0.4.17"
|
||||
version = "0.4.18"
|
||||
dependencies = [
|
||||
"anyhow",
|
||||
"cairo-rs",
|
||||
@@ -1614,6 +1614,7 @@ dependencies = [
|
||||
"rand",
|
||||
"serde",
|
||||
"serde_json",
|
||||
"sha2",
|
||||
"symphonia",
|
||||
"tokio",
|
||||
"tokio-tungstenite",
|
||||
@@ -1834,6 +1835,17 @@ dependencies = [
|
||||
"digest",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "sha2"
|
||||
version = "0.10.9"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
|
||||
dependencies = [
|
||||
"cfg-if",
|
||||
"cpufeatures",
|
||||
"digest",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "shlex"
|
||||
version = "1.3.0"
|
||||
|
||||
Reference in New Issue
Block a user