Implement new RPC authorization using --rpc-secret option

1 files changed, 8 insertions, 0 deletions

diff --git a/src/RpcMethodImpl.h b/src/RpcMethodImpl.h
index 5671d3f9..b20087ae 100644
--- a/src/RpcMethodImpl.h
+++ b/src/RpcMethodImpl.h
@@ -572,6 +572,14 @@ protected:
   virtual std::unique_ptr<ValueBase> process
   (const RpcRequest& req, DownloadEngine* e) CXX11_OVERRIDE;
 public:
+  virtual void authorize(RpcRequest& req, DownloadEngine* e) CXX11_OVERRIDE
+  {
+    // Batch calls (e.g., system.multicall) authorizes only nested
+    // methods. This is because XML-RPC system.multicall only accpets
+    // methods array and there is no room for us to insert token
+    // parameter.
+  }
+
   static const char* getMethodName()
   {
     return "system.multicall";