From 498c79f434856aa68e9a883247ea69a22256fce6 Mon Sep 17 00:00:00 2001
From: Tom van der Lee <tom@vanderlee.io>
Date: Wed, 22 Jul 2026 14:51:44 +0200
Subject: Added auth layer

---
 ttun_server/websockets.py | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'ttun_server/websockets.py')

diff --git a/ttun_server/websockets.py b/ttun_server/websockets.py
index c791625..88d6cac 100644
--- a/ttun_server/websockets.py
+++ b/ttun_server/websockets.py
@@ -4,7 +4,9 @@ import os
 from uuid import uuid4
 
 from fastapi import WebSocket, WebSocketDisconnect
+from starlette.authentication import requires
 
+import conf
 import ttun_server
 from proxy.queue import ProxyQueue
 from ttun_server.types import (
@@ -31,6 +33,7 @@ async def assert_compatible_version(websocket: WebSocket, config: Config) -> Non
             await websocket.close(4001, 'Your client is too new')
 
 
+@requires(['authenticated', 'token'] if conf.ENABLE_AUTH else [])
 async def tunnel(websocket: WebSocket) -> None:
     request_tasks: dict[str, asyncio.Task] = {}
     proxy_queues: dict[str, ProxyQueue] = {}
-- 
cgit v1.2.3