starred/jellyfin
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin.git synced 2026-05-04 18:09:12 +03:00
Code Issues 822 Packages Projects Releases 10 Wiki Activity

[Issue]: Regression: Auth with API Key #5111

New Issue
Closed
opened 2026-02-07 01:28:11 +03:00 by OVERLORD · 5 comments
OVERLORD commented 2026-02-07 01:28:11 +03:00
Owner
Copy Link

Originally created by @endrl on GitHub (Sep 26, 2023).

Please describe your bug

The following endpoints return a 403 Forbidden while using an API key in latest master

  • GET /System/Info
  • GET ​/Library​/VirtualFolders

Other endpoints like /Items or Videos/${itemId}/master.m3u8 still work

Repro:

  • Try to use something like that http://localhost:8096/System/Info?ApiKey=379cbd42c3af4ff0a9f3f4535a25170fx
  • Returns 403

Thank you

Jellyfin Version

Other

if other:

master

Environment

- OS: Ubuntu 22.04
- Linux Kernel: 
- Virtualization: VMware
- Clients: -
- Browser: -
- FFmpeg Version: -
- Playback Method: -
- Hardware Acceleration: -
- GPU Model: -
- Plugins: -
- Reverse Proxy: -
- Base URL: -
- Networking:-
- Storage: -

Jellyfin logs

No response

FFmpeg logs

No response

Please attach any browser or client logs here

No response

Please attach any screenshots here

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
Originally created by @endrl on GitHub (Sep 26, 2023). ### Please describe your bug The following endpoints return a `403 Forbidden` while using an API key in latest master * GET `/System/Info` * GET `​/Library​/VirtualFolders` Other endpoints like `/Items` or `Videos/${itemId}/master.m3u8` still work Repro: * Try to use something like that `http://localhost:8096/System/Info?ApiKey=379cbd42c3af4ff0a9f3f4535a25170fx` * Returns 403 Thank you ### Jellyfin Version Other ### if other: master ### Environment ```markdown - OS: Ubuntu 22.04 - Linux Kernel: - Virtualization: VMware - Clients: - - Browser: - - FFmpeg Version: - - Playback Method: - - Hardware Acceleration: - - GPU Model: - - Plugins: - - Reverse Proxy: - - Base URL: - - Networking:- - Storage: - ``` ### Jellyfin logs _No response_ ### FFmpeg logs _No response_ ### Please attach any browser or client logs here _No response_ ### Please attach any screenshots here _No response_ ### Code of Conduct - [X] I agree to follow this project's Code of Conduct
OVERLORD added the bugstale labels 2026-02-07 01:28:11 +03:00
OVERLORD commented 2026-02-07 01:28:14 +03:00
Author
Owner
Copy Link

@nielsvanvelzen commented on GitHub (Sep 26, 2023):

This might be a regression from #9747 (CC @Shadowghost).

@nielsvanvelzen commented on GitHub (Sep 26, 2023): This might be a regression from #9747 (CC @Shadowghost).
OVERLORD commented 2026-02-07 01:28:16 +03:00
Author
Owner
Copy Link

@Shadowghost commented on GitHub (Sep 26, 2023):

Possible, but it should have worked with the selected policy. I'll take a look when I have time.

@Shadowghost commented on GitHub (Sep 26, 2023): Possible, but it should have worked with the selected policy. I'll take a look when I have time.
OVERLORD commented 2026-02-07 01:28:17 +03:00
Author
Owner
Copy Link

@endrl commented on GitHub (Sep 26, 2023):

Thank you for your fast response. I reverted the commit and it works again.

@endrl commented on GitHub (Sep 26, 2023): Thank you for your fast response. I reverted the commit and it works again.
OVERLORD commented 2026-02-07 01:28:17 +03:00
Author
Owner
Copy Link

@jellyfin-bot commented on GitHub (Jan 25, 2024):

This issue has gone 120 days without an update and will be closed within 21 days if there is no new activity. To prevent this issue from being closed, please confirm the issue has not already been fixed by providing updated examples or logs.

If you have any questions you can use one of several ways to contact us.

@jellyfin-bot commented on GitHub (Jan 25, 2024): This issue has gone 120 days without an update and will be closed within 21 days if there is no new activity. To prevent this issue from being closed, please confirm the issue has not already been fixed by providing updated examples or logs. If you have any questions you can use one of several ways to [contact us](https://jellyfin.org/contact).
OVERLORD commented 2026-02-07 01:28:18 +03:00
Author
Owner
Copy Link

@jellyfin-bot commented on GitHub (Feb 17, 2024):

This issue was closed due to inactivity.

@jellyfin-bot commented on GitHub (Feb 17, 2024): This issue was closed due to inactivity.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
EFjellyfin.db
area:database
awaiting-feedback
backend
blocked
breaking change: web api
bug
build
ci
confirmed
discussion needed
dotnet future
downstream
duplicate
enhancement
feature
future
github-actions
good first issue
hdr
help wanted
invalid
investigation
librarydb
live-tv
lyrics
media playback
music
needs testing
nuget
performance
platform
pull-request
Mirrored from GitHub Pull Request
 question
regression
release critical
requires-web
roadmap
security
security
stale
support
syncplay
ui & ux
upstream
wontfix
No Label bug stale
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/jellyfin#5111
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?