From d42f52c198a50aa3d5baa2f79d0575dad2d6934d Mon Sep 17 00:00:00 2001 From: Mike Nolan Date: Sun, 18 Oct 2026 13:56:17 +0000 Subject: [PATCH] Fix a /api/v1/webhook auth bypass --- Program.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Program.cs b/Program.cs index a2cce72..16d2e00 100644 --- a/Program.cs +++ b/Program.cs @@ -404,7 +404,7 @@ namespace Tesses.YouTubeDownloader2025Companion var authHdr = auth.Split(' ', 2, StringSplitOptions.RemoveEmptyEntries); var cfg = Config ?? new AuthConfig(); - if (string.IsNullOrWhiteSpace(cfg.Session) || (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1])) + if (!string.IsNullOrWhiteSpace(cfg.Session) || (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1])) { try {