From 5234c22dd067de815cd80b1788a7b4e51b18b077 Mon Sep 17 00:00:00 2001 From: Mike Nolan Date: Sun, 18 Oct 2026 13:57:47 +0000 Subject: [PATCH] Fix a /api/v1/webhook auth bypass --- Program.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Program.cs b/Program.cs index 16d2e00..406cd05 100644 --- a/Program.cs +++ b/Program.cs @@ -404,7 +404,7 @@ namespace Tesses.YouTubeDownloader2025Companion var authHdr = auth.Split(' ', 2, StringSplitOptions.RemoveEmptyEntries); var cfg = Config ?? new AuthConfig(); - if (!string.IsNullOrWhiteSpace(cfg.Session) || (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1])) + if (!string.IsNullOrWhiteSpace(cfg.Session) && (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1])) { try {