Authentication Time Comparisons Are For What?

dtulloss · July 31, 2018, 5:41pm

We are getting errors that seem to stem from this time comparison and were wondering what is the precise purpose of the following lines:

github.com

lynckia/licode/blob/62566c730a6751d6def6a69fb56a26dd86b6850f/nuve/nuveAPI/auth/nuveAuthenticator.js#L26




if (lastParams === undefined) {
    return true;
}


lastTS = lastParams.timestamp;
newTS = params.timestamp;
lastC = lastParams.cnonce;
newC = params.cnonce;


if (newTS < lastTS || (lastTS === newTS && lastC === newC)) {
    console.log('Last timestamp: ', lastTS, ' and new: ', newTS);
    console.log('Last cnonce: ', lastC, ' and new: ', newC);
    return false;
}


return true;
};


var checkSignature = function (params, key) {
"use strict";

We have all sorts of ideas about how to avoid these errors, including just removing these lines, but obviously wouldn’t want break authentication in an unexpected way.

Topic		Replies	Views
Any plan to migrate to Node.js v8.x LTS? Features	5	1146	December 18, 2017
JS Client not responding to Auth challenge	0	586	July 28, 2014
Licode over HTTPS	2	3027	April 24, 2019
Socket.io.on parameter callback is null/undefined Support	1	1344	November 9, 2017
Nuve does not respond	1	445	June 10, 2013

Authentication Time Comparisons Are For What?

Related topics