Allow publish.iacr.org to authenticate itself.

IACR · Nov 30, 2023 · 2cefe8f · 2cefe8f
1 parent d5370be
commit 2cefe8f
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/iacr/api/updatePaper.php b/iacr/api/updatePaper.php
@@ -24,9 +24,14 @@
                          $Opt['dbName']);
 
 if (!hash_equals(get_hmac($msg), $_POST['auth'])) {
-  showError('Bad auth token');
-  exit;
+  // 2023-11-30 added ability to authenticate from publish.iacr.org without year.
+  $msg = $Opt['shortName'] . $_POST['paperId'] . $_POST['email'];
+  if (!hash_equals(get_hmac($msg), $_POST['auth'])) {
+    showError('Bad auth token');
+    exit;
+  }
 }
+
 
 if (empty($_POST['action']) || $_POST['action'] !== 'finalPaper') {
   showError('Unknown action');