Authentication Time Comparisons Are For What?

dtulloss · July 31, 2018, 5:41pm

We are getting errors that seem to stem from this time comparison and were wondering what is the precise purpose of the following lines:

github.com

lynckia/licode/blob/62566c730a6751d6def6a69fb56a26dd86b6850f/nuve/nuveAPI/auth/nuveAuthenticator.js#L26




if (lastParams === undefined) {
    return true;
}


lastTS = lastParams.timestamp;
newTS = params.timestamp;
lastC = lastParams.cnonce;
newC = params.cnonce;


if (newTS < lastTS || (lastTS === newTS && lastC === newC)) {
    console.log('Last timestamp: ', lastTS, ' and new: ', newTS);
    console.log('Last cnonce: ', lastC, ' and new: ', newC);
    return false;
}


return true;
};


var checkSignature = function (params, key) {
"use strict";

We have all sorts of ideas about how to avoid these errors, including just removing these lines, but obviously wouldn’t want break authentication in an unexpected way.

Topic		Replies	Views
Any plan to migrate to Node.js v8.x LTS? Features	5	1115	December 18, 2017
Socket.io.on parameter callback is null/undefined Support	1	1264	November 9, 2017
Error: Argument passed in must be a single String Support	0	815	March 22, 2018
Connecting to Licode from other server	1	537	November 19, 2015
Basic Example not working : ServiceID and key are required!	2	815	March 26, 2015

Authentication Time Comparisons Are For What?

Related Topics