Web server simplifications and handers#7429
Conversation
…from MD5 and add some examples. This allows for the cleanup of various to/from HEX routines elsewhere.
|
With the changes a simple Webserver now includes mbedtls software libs. This increases code size a lot. Actually the md5 routine from mbedtls is used which is in all MCUs a routine which is embedded in ROM and does not increase code size. |
|
@Jason2866 -- Ok - so your estimate is that by replacing md5 by the rom routines - we can totally remove the need for mbedtls ? Correct ? If so - happy to give that a try. |
|
Yes, see this change #8667 |
lucasssvaz
left a comment
There was a problem hiding this comment.
I think this is a very nice improvement but needs some small fixes first, mainly the mbedtls overhead and the crashing when using a bearer. Please also fix the conflicts to update do 3.0.0
441848f to
dcd64e1
Compare
21889f9 to
d24668e
Compare
98b3d32 to
81663f5
Compare
lucasssvaz
left a comment
There was a problem hiding this comment.
@SuGlider @P-R-O-C-H-Y PR fixed and ready for review
Proposal to simplify the authentication code in de webserver (and potentially also derisk it); and to also allow for richer authentication; such as with multiple usernames and passwords, the use of Time based one-time passwords or typical IoT bearer tokens.
Also adds a number of extra examples - including one that uses an authentication cookie.
Has been tested on ESP-8266 and ESP-32.