airvideo 0.0.2 → 0.0.3

data/README.rdoc

@@ -8,15 +8,8 @@ but it will give you the Streamable and Playable URLs of the videos on your AirV
 == Usage
 I'd like to be able to write a shiny GUI for all this, but alas, I am crap at the GUI. So as it stands you'll need to do this:
 
-    my_vids = AirVideo::Client.new('me.dyndns.org',45631,'01234_PASSWORD_DIGEST_SEE_BELOW_5678')
+    my_vids = AirVideo::Client.new('me.dyndns.org',45631,'YOUR PASSWORD')
     # => <AirVideo Connection: me.dyndns.org:45631>
     my_vids.ls
 
-== Passwords
-If you've ever played with storing passwords you'll know about cryptographic hashing and using salts.
-
-Essentially when you store a password, you don't store the actual password, you store the result of a cryptographic algorithm acting on the password and a string unique to your project (your salt). This means that people can't find out what the passwords are and won't be given access unless they know both the password *and* the salt.
-
-As it currently stands I don't know the salt for the AirVideo system. I think it's an SHA1 algorithm, but there's no real way to know unless I know the salt or reverse engineer their server or iPhone app. That's a little over my head, so instead if you want to use a password on your AirVideo server you'll need to hunt down your password digest.
-
-This gist: http://gist.github.com/412133 will tell you what your passwordDigest is for you. You'll need the pcap libraries and gem installed, as well as read access to the device you're serving AirVideo from.
+If you have the ENV['HTTP_PROXY'] variable set (to something like 'myproxy.com:8080') then everything will be piped through there too.

data/VERSION

@@ -1 +1 @@
-0.0.2
+0.0.3

data/lib/airvideo.rb

@@ -1,5 +1,6 @@
 require 'net/http'
 require 'stringio'
+require 'digest/sha1'
 
 # == TODO
 # * Potential bug: can you cd into a file?
@@ -17,8 +18,6 @@ module AirVideo
     # Specify where your AirVideo Server lives. If your HTTP_PROXY environment variable is set, it will be honoured.
     #
     # At the moment I'm expecting ENV['HTTP_PROXY'] to have the form 'sub.domain.com:8080', I throw an http:// and bung it into URI.parse for convenience.
-    #
-    # I haven't currently worked out what the AirVideo salt is (or even confirmed that it is SHA1) so you'll need to snoop your own passwordDigest and pass it into the last term, or not use one for now.
     def initialize(server,port = 45631,password=nil)
       if ENV['HTTP_PROXY'].nil?
         @http = Net::HTTP
@@ -27,7 +26,7 @@ module AirVideo
         @http = Net::HTTP::Proxy(proxy.host, proxy.port)
       end
       @endpoint = URI.parse "http://#{server}:#{port}/service"
-      @passworddigest = password
+      @passworddigest = Digest::SHA1.hexdigest("S@17" + password + "@1r").upcase if !password.nil?
       
       @req = Net::HTTP::Post.new(@endpoint.path)
       @req['User-Agent'] = 'AirVideo/2.2.4 CFNetwork/459 Darwin/10.0.0d3'

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: airvideo
 version: !ruby/object:Gem::Version 
-  hash: 27
+  hash: 25
   prerelease: false
   segments: 
   - 0
   - 0
-  - 2
-  version: 0.0.2
+  - 3
+  version: 0.0.3
 platform: ruby
 authors: 
 - JP Hastings-Spital