v0.4.18: protección anti-secuestro de ID en el relay de internet

relay.rs envía al relay una huella SHA-256 del client_token al registrar
el ID de 8 dígitos, en vez del token en texto plano. Permite que el relay
(gradio-relay, cambio complementario ya desplegado en relay.gradio.net)
rechace un re-registro de un ID activo cuando la huella no coincide,
cerrando la ventana para que un tercero que conozca el ID intercepte el
token de un cliente remoto suplantando a la estación real.
This commit is contained in:
2026-08-23 01:36:07 -05:00
parent 03084e2d5a
commit 70940420ff
5 changed files with 52 additions and 10 deletions
Generated
+13 -1
View File
@@ -1591,7 +1591,7 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
[[package]]
name = "radio-player"
version = "0.4.17"
version = "0.4.18"
dependencies = [
"anyhow",
"cairo-rs",
@@ -1614,6 +1614,7 @@ dependencies = [
"rand",
"serde",
"serde_json",
"sha2",
"symphonia",
"tokio",
"tokio-tungstenite",
@@ -1834,6 +1835,17 @@ dependencies = [
"digest",
]
[[package]]
name = "sha2"
version = "0.10.9"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
dependencies = [
"cfg-if",
"cpufeatures",
"digest",
]
[[package]]
name = "shlex"
version = "1.3.0"