From 4996d7122f9de631b52b28c682aca01fc6c8fd35 Mon Sep 17 00:00:00 2001 From: tomkat83 Date: Mon, 7 Mar 2016 13:10:38 +0100 Subject: [PATCH] Bugfix: enforce PIN for protected users Bugfix for Plex.tv bug: don't allow protected user to get a token if pin= in url is omitted --- resources/lib/PlexAPI.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/resources/lib/PlexAPI.py b/resources/lib/PlexAPI.py index a4b64f90..ce17c6c4 100644 --- a/resources/lib/PlexAPI.py +++ b/resources/lib/PlexAPI.py @@ -1117,6 +1117,9 @@ class PlexAPI(): else: pin = None # Switch to this Plex Home user, if applicable + # Plex bug: don't call url for protected user with empty PIN + if user['protected'] == '1' and not pin: + break username, usertoken = self.PlexSwitchHomeUser( user['id'], pin, @@ -1160,8 +1163,7 @@ class PlexAPI(): url = 'https://plex.tv/api/home/users/' + userId + '/switch' if pin: url += '?pin=' + pin - self.logMsg('Switching to user %s with url %s and machineId %s' - % (userId, url, machineId), 0) + self.logMsg('Switching to user %s' % userId, 0) answer = self.TalkToPlexServer(url, talkType="POST", token=token) if not answer: self.logMsg('Error: plex.tv switch HomeUser change failed', -1)