Franciskid
c964b4e37a
The sign-in bootstrap sent the auth request body as a JS object, so it
was coerced to [object Object] and AuthenticateByName returned 400. Send
JSON.stringify(...) instead.
Guest credentials were written to localStorage as a flat object under
made-up keys. jellyfin-web reads jellyfin_credentials as
{Servers:[{Id,AccessToken,UserId,...}]}, so the guest was treated as
logged out. Write that shape, pulling server Id/name from
System/Info/Public, and redirect with the 10.11 hash route
(#/details?id=...&serverId=...) instead of the legacy #!/ form that
rendered a blank page.
Creating a link now rejects folders and libraries (only movies and
episodes are shareable) so a guest cannot land on an empty tag-filtered
library. Item ids from the menu action are validated as GUIDs client
side, rejected creates are logged server side, malformed redeem tokens
return 404 instead of 500, and the admin table shows the item name and a
copyable link instead of the raw item id.
74 lignes
3.0 KiB
C#
74 lignes
3.0 KiB
C#
using System;
|
|
|
|
namespace Jellyfin.Plugin.ShareLinks.Models;
|
|
|
|
/// <summary>
|
|
/// Persistent share-link record. Only the token hash is stored; the raw token
|
|
/// never enters durable storage.
|
|
/// </summary>
|
|
public sealed class ShareLinkRecord
|
|
{
|
|
/// <summary>Gets or sets the share-link id.</summary>
|
|
public Guid Id { get; set; } = Guid.NewGuid();
|
|
|
|
/// <summary>Gets or sets the HMAC hash of the token.</summary>
|
|
public string TokenHash { get; set; } = string.Empty;
|
|
|
|
/// <summary>Gets or sets the Jellyfin item id snapshot.</summary>
|
|
public string ItemId { get; set; } = string.Empty;
|
|
|
|
/// <summary>Gets or sets the Jellyfin item name snapshot.</summary>
|
|
public string ItemNameSnapshot { get; set; } = string.Empty;
|
|
|
|
/// <summary>Gets or sets the library id snapshot.</summary>
|
|
public string? LibraryId { get; set; }
|
|
|
|
/// <summary>Gets or sets the user id that created the link.</summary>
|
|
public Guid? CreatedByUserId { get; set; }
|
|
|
|
/// <summary>Gets or sets the UTC creation time.</summary>
|
|
public DateTimeOffset CreatedAtUtc { get; set; } = DateTimeOffset.UtcNow;
|
|
|
|
/// <summary>Gets or sets the UTC redemption time, if any.</summary>
|
|
public DateTimeOffset? RedeemedAtUtc { get; set; }
|
|
|
|
/// <summary>Gets or sets the UTC expiry time.</summary>
|
|
public DateTimeOffset ExpiresAtUtc { get; set; }
|
|
|
|
/// <summary>Gets or sets the current lifecycle status.</summary>
|
|
public ShareLinkStatus Status { get; set; } = ShareLinkStatus.Pending;
|
|
|
|
/// <summary>Gets or sets the guest user id associated with the link.</summary>
|
|
public Guid? GuestUserId { get; set; }
|
|
|
|
/// <summary>Gets or sets the guest user name associated with the link.</summary>
|
|
public string? GuestUserName { get; set; }
|
|
|
|
/// <summary>Gets or sets the access token id used by the guest session, if available.</summary>
|
|
public string? AccessTokenId { get; set; }
|
|
|
|
/// <summary>Gets or sets the device id used by the guest session, if available.</summary>
|
|
public string? DeviceId { get; set; }
|
|
|
|
/// <summary>Gets or sets the allowed tag snapshot, if any.</summary>
|
|
public string? AllowedTag { get; set; }
|
|
|
|
/// <summary>Gets or sets a value indicating whether the link may be used once only.</summary>
|
|
public bool OneUse { get; set; } = true;
|
|
|
|
/// <summary>Gets or sets the encrypted guest password, if one has been generated.</summary>
|
|
public string? GuestPasswordEncrypted { get; set; }
|
|
|
|
/// <summary>Gets or sets a value indicating whether metadata was touched during cleanup.</summary>
|
|
public bool MetadataTouched { get; set; }
|
|
|
|
/// <summary>Gets or sets the number of cleanup attempts performed on this record.</summary>
|
|
public int CleanupAttempts { get; set; }
|
|
|
|
/// <summary>Gets or sets the last cleanup error, if any.</summary>
|
|
public string? CleanupError { get; set; }
|
|
|
|
/// <summary>Gets or sets the share URL issued at creation, for admin display.</summary>
|
|
public string? ShareUrl { get; set; }
|
|
}
|