diff options
| author | Wladimir J. van der Laan <[email protected]> | 2015-07-07 14:53:48 +0200 |
|---|---|---|
| committer | Wladimir J. van der Laan <[email protected]> | 2015-07-13 13:11:41 +0200 |
| commit | 71cbeaad9a929ba6a7b62d9b37a09b214ae00c1a (patch) | |
| tree | 63148f270b290394d416ea7d4063d3bc1bbe7541 /src/rpcprotocol.h | |
| parent | Merge pull request #6398 (diff) | |
| download | discoin-71cbeaad9a929ba6a7b62d9b37a09b214ae00c1a.tar.xz discoin-71cbeaad9a929ba6a7b62d9b37a09b214ae00c1a.zip | |
rpc: Implement random-cookie based authentication
When no `-rpcpassword` is specified, use a special 'cookie' file for
authentication. This file is generated with random content when the
daemon starts, and deleted when it exits. Read access to this file
controls who can access through RPC. By default this file is stored in
the data directory but it be overriden with `-rpccookiefile`.
This is similar to Tor CookieAuthentication: see
https://www.torproject.org/docs/tor-manual.html.en
Alternative to #6258. Like that pull, this allows running bitcoind
without any manual configuration. However, daemons should ideally never write to
their configuration files, so I prefer this solution.
Diffstat (limited to 'src/rpcprotocol.h')
| -rw-r--r-- | src/rpcprotocol.h | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/src/rpcprotocol.h b/src/rpcprotocol.h index ccd2439c9..2360ec2c6 100644 --- a/src/rpcprotocol.h +++ b/src/rpcprotocol.h @@ -14,6 +14,7 @@ #include <boost/iostreams/stream.hpp> #include <boost/asio.hpp> #include <boost/asio/ssl.hpp> +#include <boost/filesystem.hpp> #include "univalue/univalue.h" @@ -165,4 +166,13 @@ UniValue JSONRPCReplyObj(const UniValue& result, const UniValue& error, const Un std::string JSONRPCReply(const UniValue& result, const UniValue& error, const UniValue& id); UniValue JSONRPCError(int code, const std::string& message); +/** Get name of RPC authentication cookie file */ +boost::filesystem::path GetAuthCookieFile(); +/** Generate a new RPC authentication cookie and write it to disk */ +bool GenerateAuthCookie(std::string *cookie_out); +/** Read the RPC authentication cookie from disk */ +bool GetAuthCookie(std::string *cookie_out); +/** Delete RPC authentication cookie from disk */ +void DeleteAuthCookie(); + #endif // BITCOIN_RPCPROTOCOL_H |