access-control: allow internal redirect

livepeer · Apr 30, 2024 · b8b6500 · b8b6500
1 parent 4aa81ad
commit b8b6500
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/handlers/accesscontrol/access-control.go b/handlers/accesscontrol/access-control.go
@@ -187,6 +187,14 @@ func (ac *AccessControlHandlersCollection) IsAuthorized(ctx context.Context, pla
 		}
 	}
 
+	if payload.Origin == "null" && payload.Referer != "" {
+		match, _ := regexp.MatchString(`(?:prod|staging)-.*catalyst-\d+`, payload.Referer)
+		if match {
+			glog.Infof("Allowing on redirect for playbackID %v origin=%v referer=%v host=%v", playbackID, payload.Origin, payload.Referer, payload.Host)
+			return true, nil
+		}
+	}
+
 	start := time.Now()
 	defer func() {
 		metrics.Metrics.AccessControlRequestDurationSec.