immich-app/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-07-25 14:00:45 +03:00
Code Issues 783 Packages Projects Releases 22 Wiki Activity

[PR #2092] [MERGED] feat(server): require auth for more endpoints #9370

New Issue
Closed
opened 2026-02-05 14:03:32 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-05 14:03:32 +03:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/immich-app/immich/pull/2092
Author: @michelheusschen
Created: 3/27/2023
Status: ✅ Merged
Merged: 3/27/2023
Merged by: @alextran1502

Base: main ← Head: feat/server-endpoint-authentication

📝 Commits (2)

  • 94aad52 feat(server): require auth for more endpoints
  • 1f4ed7c dev: add authorization header to profile image on mobile

📊 Changes

9 files changed (+129 additions, -48 deletions)

View changed files

📝 mobile/lib/modules/home/ui/home_page_app_bar.dart (+3 -22)
📝 mobile/lib/modules/home/ui/profile_drawer/profile_drawer_header.dart (+3 -22)
➕ mobile/lib/modules/home/ui/user_circle_avatar.dart (+44 -0)
📝 mobile/openapi/doc/ServerInfoApi.md (+11 -1)
📝 mobile/openapi/doc/UserApi.md (+22 -2)
📝 server/apps/immich/src/controllers/server-info.controller.ts (+1 -0)
📝 server/apps/immich/src/controllers/user.controller.ts (+3 -1)
📝 server/immich-openapi-specs.json (+24 -0)
📝 web/src/api/open-api/api.ts (+18 -0)

📄 Description

Require authentication for the following endpoints, that are currently accessible without authentication:

  • /api/user/:userId
  • /api/user/profile-image/:userId
  • /api/server-info

If users are interacting with the API directly, this could be considered a breaking change.

Fixes #1218

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/immich-app/immich/pull/2092 **Author:** [@michelheusschen](https://github.com/michelheusschen) **Created:** 3/27/2023 **Status:** ✅ Merged **Merged:** 3/27/2023 **Merged by:** [@alextran1502](https://github.com/alextran1502) **Base:** `main` ← **Head:** `feat/server-endpoint-authentication` --- ### 📝 Commits (2) - [`94aad52`](https://github.com/immich-app/immich/commit/94aad52b75350aca3e07834bf59c874ec50ed946) feat(server): require auth for more endpoints - [`1f4ed7c`](https://github.com/immich-app/immich/commit/1f4ed7c81107570b498bd08153344fec94655016) dev: add authorization header to profile image on mobile ### 📊 Changes **9 files changed** (+129 additions, -48 deletions) <details> <summary>View changed files</summary> 📝 `mobile/lib/modules/home/ui/home_page_app_bar.dart` (+3 -22) 📝 `mobile/lib/modules/home/ui/profile_drawer/profile_drawer_header.dart` (+3 -22) ➕ `mobile/lib/modules/home/ui/user_circle_avatar.dart` (+44 -0) 📝 `mobile/openapi/doc/ServerInfoApi.md` (+11 -1) 📝 `mobile/openapi/doc/UserApi.md` (+22 -2) 📝 `server/apps/immich/src/controllers/server-info.controller.ts` (+1 -0) 📝 `server/apps/immich/src/controllers/user.controller.ts` (+3 -1) 📝 `server/immich-openapi-specs.json` (+24 -0) 📝 `web/src/api/open-api/api.ts` (+18 -0) </details> ### 📄 Description Require authentication for the following endpoints, that are currently accessible without authentication: - `/api/user/:userId` - `/api/user/profile-image/:userId` - `/api/server-info` If users are interacting with the API directly, this could be considered a breaking change. Fixes #1218 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
OVERLORD added the pull-request label 2026-02-05 14:03:32 +03:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
accessibility
changelog:enhancement
changelog:security
changelog:skip
changelog:translation
cli
date-time
dependencies
documentation
external-library
format
good first issue
mobile-beta
mobile-beta
mobile-beta
needs-answer
nice to have
pull-request
Mirrored from GitHub Pull Request
 sharing
tech-debt
📱mobile
🖥️web
🗄️server
🧠machine-learning
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: immich-app/immich#9370
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?