From 170a7a860d184726e4428da5ceb1e7e2c61bffe2 Mon Sep 17 00:00:00 2001
From: Julian Rother <julianr@fsmpi.rwth-aachen.de>
Date: Sat, 14 Oct 2017 21:39:22 +0200
Subject: [PATCH] Fixed legacy_auth handler for on_publish_done events

---
 livestreams.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/livestreams.py b/livestreams.py
index 80d02ea..bd0b97d 100644
--- a/livestreams.py
+++ b/livestreams.py
@@ -17,9 +17,9 @@ def streamauth():
 		return 'Bad request', 400
 	if not internal:
 		return 'Forbidden', 403
-	if request.values['pass'] != 'caisoh8aht0wuSu':
-		return 'Forbidden', 403
 	if request.values['call'] == 'publish':
+		if request.values['pass'] != 'caisoh8aht0wuSu':
+			return 'Forbidden', 403
 		matches = query("SELECT lectures.* FROM lectures JOIN courses ON lectures.course_id = courses.id WHERE courses.handle = ? ORDER BY lectures.time DESC", request.values['name'])
 		now = datetime.now()
 		match = {'id': -1}
-- 
GitLab