Mirrors/Dispatcharr
1
0
Fork 1
mirror of https://github.com/Dispatcharr/Dispatcharr.git synced 2026-07-17 16:50:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

restrict XC access per user by configurable IP allowlist

Browse source
This commit is contained in:
Seth Van Niekerk 2026-04-28 16:35:32 -04:00
parent 2650bee7e9
commit 8894d51877
No known key found for this signature in database
GPG key ID: E86ACA677312A675
8 changed files with 91 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apps/proxy/ts_proxy/views.py
View file

@ -40,7 +40,7 @@ from .url_utils import (
from .utils import get_logger
from uuid import UUID
import gevent
from dispatcharr.utils import network_access_allowed
from dispatcharr.utils import network_access_allowed, user_xc_ip_allowed
from apps.proxy.utils import check_user_stream_limits
logger = get_logger()
@ -572,6 +572,9 @@ def stream_xc(request, username, password, channel_id):
if custom_properties["xc_password"] != password:
return Response({"error": "Invalid credentials"}, status=401)
if not user_xc_ip_allowed(request, user):
return Response({"error": "Invalid credentials"}, status=401)
if user.user_level < 10:
user_profile_count = user.channel_profiles.count()

8
apps/proxy/vod_proxy/views.py
View file

@ -19,7 +19,7 @@ from rest_framework.permissions import AllowAny
from apps.accounts.models import User
from apps.accounts.permissions import IsAdmin
from apps.proxy.utils import check_user_stream_limits
from dispatcharr.utils import network_access_allowed
from dispatcharr.utils import network_access_allowed, user_xc_ip_allowed
logger = logging.getLogger(__name__)
@ -1031,6 +1031,9 @@ def stream_xc_movie(request, username, password, stream_id, extension):
if custom_properties["xc_password"] != password:
return Response({"error": "Invalid credentials"}, status=401)
if not user_xc_ip_allowed(request, user):
return Response({"error": "Invalid credentials"}, status=401)
# All authenticated users get access to VOD from all active M3U accounts
filters = {"movie_id": stream_id, "m3u_account__is_active": True}
@ -1065,6 +1068,9 @@ def stream_xc_episode(request, username, password, stream_id, extension):
if custom_properties["xc_password"] != password:
return Response({"error": "Invalid credentials"}, status=401)
if not user_xc_ip_allowed(request, user):
return Response({"error": "Invalid credentials"}, status=401)
# All authenticated users get access to series/episodes from all active M3U accounts
filters = {"episode_id": stream_id, "m3u_account__is_active": True}