Backup_Repos/Prowlarr
1
0
Fork 0
mirror of https://github.com/Prowlarr/Prowlarr synced 2025-12-07 17:12:44 +01:00
Code Issues Projects Releases Wiki Activity

Fixed: Use separate guid for download protection

Browse source 
Fixes #963
This commit is contained in:
Qstick 2022-05-13 18:41:36 -05:00
parent bc50fd937d
commit 6783514525
3 changed files with 9 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/NzbDrone.Core/Configuration/ConfigService.cs
View file

@ -156,6 +156,8 @@ public int UILanguage
public string HmacSalt => GetValue("HmacSalt", Guid.NewGuid().ToString(), true);
public string DownloadProtectionKey => GetValue("DownloadProtectionKey", Guid.NewGuid().ToString().Replace("-", ""), true);
public bool ProxyEnabled => GetValueBoolean("ProxyEnabled", false);
public ProxyType ProxyType => GetValueEnum<ProxyType>("ProxyType", ProxyType.Http);

3
src/NzbDrone.Core/Configuration/IConfigService.cs
View file

@ -33,6 +33,9 @@ public interface IConfigService
string RijndaelSalt { get; }
string HmacSalt { get; }
//Link Protection
string DownloadProtectionKey { get; }
//Proxy
bool ProxyEnabled { get; }
ProxyType ProxyType { get; }

8
src/NzbDrone.Core/Security/ProtectionService.cs
View file

@ -15,16 +15,16 @@ public interface IProtectionService
public class ProtectionService : IProtectionService
{
private readonly IConfigFileProvider _configService;
private readonly IConfigService _configService;
public ProtectionService(IConfigFileProvider configService)
public ProtectionService(IConfigService configService)
{
_configService = configService;
}
public string Protect(string text)
{
var key = Encoding.UTF8.GetBytes(_configService.ApiKey);
var key = Encoding.UTF8.GetBytes(_configService.DownloadProtectionKey);
using (var aesAlg = Aes.Create())
{
@ -70,7 +70,7 @@ public string UnProtect(string value)
Buffer.BlockCopy(fullCipher, 0, iv, 0, iv.Length);
Buffer.BlockCopy(fullCipher, iv.Length, cipher, 0, fullCipher.Length - iv.Length);
var key = Encoding.UTF8.GetBytes(_configService.ApiKey);
var key = Encoding.UTF8.GetBytes(_configService.DownloadProtectionKey);
using (var aesAlg = Aes.Create())
{