Changes between Version 14 and Version 15 of Integrated Webserver

Timestamp:

Jul 26, 2015, 4:45:21 PM (9 years ago)

Author:

Christian Illy

Comment:

--

Integrated Webserver

@@ -10 +10 @@
 If you did put the folder in the correct spot the webserver will listen on the port defined as ControlPanelPort (from serverconfig) + 2. I.e. if you have set ControlPanelPort to 8080 (as it is by default) the webserver will listen on ''!http://<yourIpOrDomain>:8082/''
 
-If you want to enable basic '''authorization''' on the webserver create a file in the ''Mods/Allocs_WebAndMapRendering/webserver'' folder called "protect". Username for login will be "admin", password is the same as for control panel.
-
 == Is it running? ==
 To check if the webserver was started look at the output_log.txt. It should contain a line like:
@@ -18 +16 @@
 }}}
 If it does the server was started on the given port. If not one of the above mentioned conditions is not met.
+
+== Permissions ==
+Since WebAndMapRendering v7 this mod uses Steam login. This means that the permission level is calculated like this:
+1. Client has logged in with his Steam account
+  a. Client does have an explicitly set permission level in serveradmin.xml: Use the permission level from serveradmin.xml
+  a. Client does not have an explicit permission level: permission level is 1000 (same as it would be in game)
+1. Client is not logged in
+  a. A valid web token is passed to the request: Use permission level as set for that web token (see below)
+  a. Otherwise permission level is 2000
+
+The permission level is used to check to which features the client is allowed access. By default only permission level 0 has access to everything, every higher permission level does not have any access. This can be changed by assigning different permission levels to the web modules with the ''webpermission'' command.
+
+For example in order to give everyone access to the map but not any of the map features like player tracking set the permission level of the ''web.map'' module to 2000:
+ webpermission add web.map 2000
+To allow those that have logged in with their Steam accounts access to the server time in addition to the basic map set the permission level of the ''webapi.getstats'' module to 1000:
+ webpermission add webapi.getstats 1000
+
+== Web Tokens ==
+As tools like server managers obviously can not identify themselves with Steam login a token system has been added. That way those tools can provide a predefined token on ''each'' request to the webserver and those requests will be handled with the permission level given to that specific token. Web tokens are set up with the ''webtokens'' command.
 
 == apache and mod_proxy ==