diff options
author | Chris Meyers <chrismeyersfsu@users.noreply.github.com> | 2020-08-12 15:52:10 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-08-12 15:52:10 +0200 |
commit | 5dd2cb10b4fdff6ac1ce833a772073c74edde98e (patch) | |
tree | cff179be099e23c7e99aab2883360c5a5fb3c96c /docs | |
parent | Update websockets.md (diff) | |
download | awx-5dd2cb10b4fdff6ac1ce833a772073c74edde98e.tar.xz awx-5dd2cb10b4fdff6ac1ce833a772073c74edde98e.zip |
Update websockets.md
Diffstat (limited to 'docs')
-rw-r--r-- | docs/websockets.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/websockets.md b/docs/websockets.md index 79144ecead..12b81248b4 100644 --- a/docs/websockets.md +++ b/docs/websockets.md @@ -30,7 +30,7 @@ Note that the nonce timestamp is considered valid if it is within `300` second t The payload is encrypted using `HMAC-SHA256` with `settings.BROADCAST_WEBSOCKET_SECRET` as the key. The final payload that is sent, including the http header, is of the form: `secret: nonce_plaintext:HMAC_SHA256({"secret": settings.BROADCAST_WEBSOCKET_SECRET, "nonce": nonce_plaintext})`. -Upon receiving the payload, AWX decrypted the `secret` header using the known shared secret and ensures the `secret` value of the decrypted payload matches the known shared secret, `settings.BROADCAST_WEBSOCKET_SECRET`. If it does not match, the connection is closed. If it does match, the `nonce` is compared to the current time. If the nonce is off by more than `300` seconds, the connection is closed. If both tests pass, the connection is accepted. +Upon receiving the payload, AWX decrypts the `secret` header using the known shared secret and ensures the `secret` value of the decrypted payload matches the known shared secret, `settings.BROADCAST_WEBSOCKET_SECRET`. If it does not match, the connection is closed. If it does match, the `nonce` is compared to the current time. If the nonce is off by more than `300` seconds, the connection is closed. If both tests pass, the connection is accepted. ## Protocol |