Fix a /api/v1/webhook auth bypass

2026-10-18 13:57:47 +00:00
parent d42f52c198
commit 5234c22dd0
1 changed files with 1 additions and 1 deletions
@@ -404,7 +404,7 @@ namespace Tesses.YouTubeDownloader2025Companion
                var authHdr = auth.Split(' ', 2, StringSplitOptions.RemoveEmptyEntries);
                var cfg = Config ?? new AuthConfig();

-                if (!string.IsNullOrWhiteSpace(cfg.Session) || (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1]))
+                if (!string.IsNullOrWhiteSpace(cfg.Session) && (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1]))
                {
                    try
                    {