bluenviron / mediamtx

Ready-to-use SRT / WebRTC / RTSP / RTMP / LL-HLS media server and media proxy that allows to read, publish, proxy, record and playback video and audio streams.
MIT License
12.33k stars 1.53k forks source link

HTTP Authentication Exclude HLS Protocol #3770

Open Craytor opened 2 months ago

Craytor commented 2 months ago

Which version are you using?

v1.9.0

Which operating system are you using?

Describe the issue

When using authHTTPExclude, I am providing the "protocol" of "hls" of which I would like to prevent authentication due to performance concerns and the overall use case of hls http authentication. However, this does not appear to be preventing hls authentication from occurring as I am still getting requests to my server. This may not be a bug, but I believe this functionality would be great to have and is very similar to the "action" type for what to exclude.

Describe how to replicate the issue

authMethod: http
authHTTPAddress: http://address
authHTTPExclude:
  - protocol: hls
  1. Start the server with the supplied config for auth
  2. Begin publishing with streaming client
  3. Begin viewing stream

During this time, the sever will attempt to verify each request by sending it to the http address. However, I followed the example of authHTTPExclude included an action with a type. The request still goes to the HTTP server.

Did you attach the server logs?

No

Did you attach a network dump?

No

jwetzell commented 1 month ago

I don't believe protocol is valid property there. The definition for that has action and path. It does not look possible to exclude auth for a particular protocol.