Re: [mirrorbrain] Authenticating downloads?

On Wed, Nov 03, 2010 at 02:27:49PM +0100, Peter Pöml wrote:
>     
>    http://download/path/to/file          http://mirrorbrain/path/to/file
>     ^                          \               ^                 |
>     |                           \              |                 |
>  download                        \             |                 |       
>  request                        basic          |                 |
>     |                            auth -------->                  v
>   ======                           =============            ===========
>   client                             frontend               mirrorbrain
>   ======                           =============            ===========
>   ^  |  ^                          script adding                 |
>   |  |  |                           timestamp                    |
>   |  |  |                             |     ^                    |
>   |  |  |                             v      \                   |
>   |  | http://mirror1/path/to/file?stamp=abc  \                  |
>   |  |                                         \                 v
>   |  |                                        http://mirror1/path/to/file
>   |  |                                           (or entire mirror list)
> file |
>   |  v
>   |  check stamp
>   =======
>   mirror1
>   =======


With MirrorBrain 2.14.0, the above setup can be simplified as such:

    
   http://download/path/to/file 
    ^                          \
    |                           \
 download                        \
 request                        basic
    |                            auth
  ======                  =====================
  Client                  Apache w/ MirrorBrain
  ======                  =====================
  ^  |  ^                             | 
  |  |   \                            |
  |  |    \                           |
  |  |     \                          v
  |  |    http://mirror1/path/to/file?stamp=abc
  |  |
  |  |
  |  |
file |
  |  v
  |  check stamp
  =======
  mirror1
  =======


And for the record:

> You'd probably want to restrict access to the "backend" to localhost.
> That could mean that MirrorBrain refuses to do its job, due to the fact
> I mentioned before, regarding requests that require authentication
> (where there is a simple but too stupid check). That I would need to fix
> first, in order to allow MB to run behind authentication. (Which should
> be quickly done.)

That has been fixed with 2.14.0.

Peter


_______________________________________________
mirrorbrain mailing list
Archive: http://mirrorbrain.org/archive/mirrorbrain/

Note: To remove yourself from this mailing list, send a mail with the content
 	unsubscribe
to the address mirrorbrain-request_at_mirrorbrain.org