github/plexpy
1
0
Fork 0
mirror of https://github.com/Tautulli/Tautulli.git synced 2025-07-07 21:51:14 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Don't hash a blank password when removing authentication

Browse source 
* Fixes #1455
This commit is contained in:
JonnyWong16 2021-07-01 10:52:22 -07:00
parent 5a4ee2179a
commit f7fc16a1d8
No known key found for this signature in database
GPG key ID: B1F1F9807184697A
1 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
plexpy/webserve.py
View file

@ -3286,12 +3286,13 @@ class WebInterface(object):
kwargs[checked_config] = 1
# If http password exists in config, do not overwrite when blank value received
if kwargs.get('http_password') != ' ':
kwargs['http_password'] = make_hash(kwargs['http_password'])
if kwargs.get('http_password') == ' ':
kwargs['http_password'] = plexpy.CONFIG.HTTP_PASSWORD
else:
if kwargs['http_password'] != '':
kwargs['http_password'] = make_hash(kwargs['http_password'])
# Flag to refresh JWT uuid to log out clients
kwargs['jwt_update_secret'] = True and not first_run
else:
kwargs['http_password'] = plexpy.CONFIG.HTTP_PASSWORD
for plain_config, use_config in [(x[4:], x) for x in kwargs if x.startswith('use_')]:
# the use prefix is fairly nice in the html, but does not match the actual config