From ef88eba498d0362137bcc9203a4cf1a20b6dec9e Mon Sep 17 00:00:00 2001
From: metamuffin <metamuffin@disroot.org>
Date: Tue, 30 Jan 2024 16:34:38 +0100
Subject: np: authentificate native

---
 server/src/routes/ui/player.rs | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

(limited to 'server/src/routes/ui/player.rs')

diff --git a/server/src/routes/ui/player.rs b/server/src/routes/ui/player.rs
index be40d4c..becda91 100644
--- a/server/src/routes/ui/player.rs
+++ b/server/src/routes/ui/player.rs
@@ -46,9 +46,9 @@ impl PlayerConfig {
     }
 }
 
-fn jellynative_url(action: &str, node: &str) -> String {
+fn jellynative_url(action: &str, secret: &str, node: &str) -> String {
     format!(
-        "jellynative://{action}/http://{}{}",
+        "jellynative://{action}/{secret}/http://{}{}",
         CONF.hostname,
         uri!(r_stream(
             node,
@@ -72,12 +72,15 @@ pub fn r_player<'a>(
         PlayerKind::Browser => (),
         PlayerKind::Native => {
             return Ok(Either::Right(Redirect::temporary(jellynative_url(
-                "player", id,
+                "player",
+                &sess.user.native_secret,
+                id,
             ))))
         }
         PlayerKind::NativeFullscreen => {
             return Ok(Either::Right(Redirect::temporary(jellynative_url(
                 "player-fullscreen",
+                &sess.user.native_secret,
                 id,
             ))))
         }
-- 
cgit v1.2.3-70-g09d2