Leahnaya/DeathGarden_API_Rebirth
0
0
Fork 0
mirror of https://github.com/wolfswolke/DeathGarden_API_Rebirth.git synced 2026-07-10 13:44:50 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added some low level AUTH to not abuse steam api. (mirror key is defined in game but never used ._.)

Browse Source
This commit is contained in:
ZKWolf 2023-06-08 21:21:00 +02:00
parent 318c9c4107
commit 7c1da12cc4
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/start_app.py
View File

@ -4,7 +4,7 @@
# ------------------------------------------------------- #
# imports
# ------------------------------------------------------- #
from flask import Flask, send_from_directory, request, jsonify, render_template, make_response
from flask import Flask, send_from_directory, request, jsonify, abort
from threading import Thread
import os
import yaml
@ -60,6 +60,7 @@ def get_remote_ip():
else:
ip_addr = request.environ['HTTP_X_FORWARDED_FOR']
print("New Connection from: " + ip_addr)
return ip_addr
app = Flask(__name__)
@ -177,8 +178,13 @@ def analytics_batch_post():
@app.route("/api/v1/auth/provider/steam/login", methods=["POST"])
def steam_login():
get_remote_ip()
# Read Doc\SteamAuth.md for more information
ip = get_remote_ip()
user_agent = request.headers.get('User-Agent')
if user_agent != allowed_user_agent:
graylog_logger("Unauthorized User Agent {} connected from IP {}".format(user_agent, ip), "error")
abort(401, "Unauthorized")
try:
steam_session_token = request.args.get('token')
response = requests.get(
@ -361,6 +367,7 @@ steam_api_key = config['steam']['api_key']
mongo_host = config['mongodb']['host']
mongo_db = config['mongodb']['db']
mongo_collection = config['mongodb']['collection']
allowed_user_agent = "TheExit/++UE4+Release-4.21-CL-0 Windows/10.0.19045.1.256.64bit"
# ------------------------------------------------------- #
# main