jmcqueen
bc56b0a0fb
Spike scaffolding for reverse-engineering the local admin UI on a Cisco DBS-210 DECT base station. Not wired into the bot yet -- the plan is a status.xml data-collector next, then a per-store relay that fronts these calls over a websocket back to the bot. - utils/httpDigestAuth.js: dependency-free HTTP Digest MD5/qop=auth header builder + WWW-Authenticate parser. Preserves empty realm, which the DBS-210 sends and which most libs silently drop. - integrations/cisco-dect/client.js: axios wrapper with self-signed TLS bypass and a single-shot Digest challenge/response interceptor. - integrations/cisco-dect/probes.js: verified-safe read paths only in READ_PROBE_PATHS. Every mutating path is quarantined in the MUTATING_ACTION_PATHS map and exposed only via explicit trigger helpers (reboot/force-reboot/reboot-chain/factory-reset/reconfigure- tree) that fetch and attach the CSRF token from /main.html. The legacy /admin/reboot.htm alias -- which triggered a real reboot during our first blind probe -- is intentionally NOT reachable. - tests/httpDigestAuth.test.js: 6 unit tests, including the RFC 2617 canonical example and the DBS-210 empty-realm quirk. - .env.example: adds DECT_TEST_BASE_IP / _USER / _PASSWORD / _TIMEOUT_MS for the local test harness (script itself lives under scripts/, which stays gitignored). - .gitignore: adds .dect-samples/ so lab captures don't leak. |
||
|---|---|---|
| .. | ||
| atlas | ||
| cisco-dect | ||
| digicert | ||
| jira | ||
| mdm | ||
| mdmcorp | ||
| meraki | ||
| optisigns | ||
| red | ||
| serviceChannel | ||
| webex | ||
| xai | ||