mirror/zoneminder

0 Fork 0

mirror of https://github.com/ZoneMinder/zoneminder.git synced 2026-11-03 03:04:29 -05:00

Files

T

History

Nic Boet 46ccb7529f fix: without a token secret, zmu still gets an API request's own password

When ZM_AUTH_HASH_SECRET is unusable zmu refuses tokens, so
zmuCredentials() falls back to what zmu got before. With
ZM_AUTH_RELAY=plain the API's alarm action used to pass the password
from the request (pass= or password=); the fallback read only the
session, which an API call without a stateful login doesn't have, so
zmu refused the call (rc 255). zmuCredentials() takes the caller's
password first again. With a usable secret it is never used.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit 5ca19c2703ea9211fe040991305ce9b0a873faff)

2026-10-30 19:30:28 -04:00

..

fix: without a token secret, zmu still gets an API request's own password

2026-10-30 19:30:28 -04:00

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

.editorconfig

Moved the api to underneath the web directory

2014-04-29 20:41:04 +00:00

build.properties

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

build.xml

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

CMakeLists.txt

Update CMakeLists.txt

2017-05-03 12:35:54 -05:00

composer.json

fix: remove vulnerable phpunit dev dependency (CVE-2026-24765)

2026-02-11 21:59:03 -05:00

CONTRIBUTING.md

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

index.php

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

README.md

Text corrections

2023-08-27 02:00:59 +02:00

README.md

ZoneMinder API

This is the ZoneMinder API. It should be, for now, installed under the webroot e.g. /api.

app/Config/database.php.default must be configured and copied to app/Config/database.php

In addition, Security.salt and Security.cipherSeed in app/Config/core.php should be changed.

The API can run on a dedicated / separate instance, so long as it can access the database as configured in app/Config/database.php