ZoneMinder Forums

Code: Select all

OPT_USE_AUTH      enabled
AUTH_HASH_SECRET  defined
OPT_USE_AP        enabled
OPT_USE_LEGACY_API_AUTH  enabled (tried to disable as well - same)
AUTH_HASH_TTL     2

Code: Select all

root@zm:~# date
Sun Jan  5 08:09:20 AM UTC 2025
root@zm:~# curl -sk -d 'token=eyJ0eXAiOiJKV1QiLCJhbGci<...>sdwU' http://localhost/zm/api/host/monitors.json | jq .
{
  "success": false,
  "data": {
    "name": "Expired token",
    "message": "Expired token",
    "url": "/zm/api/host/monitors.json",
    "exception": {
      "class": "UnauthorizedException",
      "code": 401,
      "message": "Expired token"
    }
  }
}
root@zm:~# curl -vk 'http://localhost/zm/cgi-bin/nph-zms?mode=jpeg&monitor=1&token=eyJ0eXAiOiJKV1QiLCJhbGci<...>sdwU'
*   Trying 127.0.0.1:80...
* Connected to localhost (127.0.0.1) port 80 (#0)
> GET /zm/cgi-bin/nph-zms?mode=jpeg&monitor=1&token=eyJ0eXAiOiJKV1QiLCJhbGci<...>sdwU HTTP/1.1
> Host: localhost
> User-Agent: curl/7.81.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
* HTTP 1.0, assume close after body
< HTTP/1.0 200 OK
< Server: ZoneMinder Video Server/1.36.35
< Last-Modified: Sun, 05 Jan 2025 08:09:23 GMT
< Expires: Mon, 26 Jul 1997 05:00:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate
< Cache-Control: post-check=0, pre-check=0
< Pragma: no-cache
< Content-Type: multipart/x-mixed-replace; boundary=ZoneMinderFrame
<
Warning: Binary output can mess up your terminal. Use "--output -" to tell
Warning: curl to output it to your terminal anyway, or consider "--output
Warning: <FILE>" to save to a file.
* Failure writing output to destination
* Closing connection 0

Code: Select all

root@zm:~ # timedatectl | egrep "Time zone|synchronized"
                Time zone: Asia/Novosibirsk (+07, +0700)
System clock synchronized: yes

mysql> SELECT @@system_time_zone;
+--------------------+
| @@system_time_zone |
+--------------------+
| +07                |
+--------------------+
1 row in set (0.00 sec)

mysql> SELECT TIMEDIFF(NOW(), UTC_TIMESTAMP);
+--------------------------------+
| TIMEDIFF(NOW(), UTC_TIMESTAMP) |
+--------------------------------+
| 07:00:00                       |
+--------------------------------+
1 row in set (0.00 sec)

root@zm:~ # grep "timezone" /etc/php/8.1/apache2/php.ini
date.timezone = 'Asia/Novosibirsk'

Code: Select all

import mysql.connector
from mysql.connector import Error
import os
import time

class DatabaseManager:
    def __init__(self, config_file_path):
        self.config = self.load_env(config_file_path)

    def load_env(self, file_path):
        if not os.path.exists(file_path):
            raise FileNotFoundError(f"Configuration file not found: {file_path}")

        config = {}
        with open(file_path, 'r') as file:
            for line in file:
                line = line.strip()
                if not line or line.startswith('#'): 
                    continue
                key, value = line.split('=', 1)
                config[key.strip()] = value.strip()

        return {
            'ZM_DB_HOST': config.get('ZM_DB_HOST', 'localhost'),
            'ZM_DB_NAME': config.get('ZM_DB_NAME', ''),
            'ZM_DB_USER': config.get('ZM_DB_USER', ''),
            'ZM_DB_PASS': config.get('ZM_DB_PASS', '')
        }

    def db_connect(self):
        try:
            conn = mysql.connector.connect(
                host=self.config['ZM_DB_HOST'],
                database=self.config['ZM_DB_NAME'],
                user=self.config['ZM_DB_USER'],
                password=self.config['ZM_DB_PASS']
            )
            return conn
        except Error as e:
            print(f"Error connecting to MySQL database: {str(e)}")
            return None

    def db_query(self, query, params=None):
        conn = self.db_connect()
        if conn is None:
            return None

        cursor = conn.cursor()
        try:
            if params:
                cursor.execute(query, params)
            else:
                cursor.execute(query)

            conn.commit()
            return cursor
        except Error as e:
            print(f"SQL Error: {str(e)}")
            return None
        finally:
            cursor.close()
            conn.close()

    def revoke_all_tokens(self):
        min_token_time = int(time.time())
        result = self.db_query('UPDATE `Users` SET `TokenMinExpiry` = %s', (min_token_time,))
        if result is not None:
            print('All tokens have been revoked.')
        else:
            print('Failed to revoke tokens.')

if __name__ == '__main__':
    config_file_path = '/etc/zm/zm.conf'
    db_manager = DatabaseManager(config_file_path)
    db_manager.revoke_all_tokens()