All endpoints in AudioController are unauthenticated #6952

Open
opened 2025-12-22 05:02:00 +01:00 by backuprepo · 0 comments
Owner

Originally created by @felix920506 on GitHub (Apr 23, 2025).

Split from #5415

Has a comment saying "TODO: In order to authenticate this in the future, Dlna playback will require updating"
Currently affects "GetAudioStream()" and "GetAudioStreamByContainer()" endpoints. Anyone with knowledge about item ID's can retrieve audio from the server, even if not logged in.
Potential fix: Authenticate endpoints

Originally created by @felix920506 on GitHub (Apr 23, 2025). Split from #5415 Has a comment saying "TODO: In order to authenticate this in the future, Dlna playback will require updating" Currently affects "GetAudioStream()" and "GetAudioStreamByContainer()" endpoints. Anyone with knowledge about item ID's can retrieve audio from the server, even if not logged in. Potential fix: Authenticate endpoints
backuprepo added the
security
bug
labels 2025-12-22 05:02:00 +01:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: starred/jellyfin#6952
No description provided.