diff --git a/.env.sample b/.env.sample index 029af5dd..32e464a5 100644 --- a/.env.sample +++ b/.env.sample @@ -196,9 +196,6 @@ CUSTOM_HTML= # at the /api/v1/search endpoint. # Enabled by default, set to false to disable. # ENABLE_SEARCH_API=true -# Whether to allow unauthenticated requests to the Search API using just the x-aiostreams-user-data header. -# If set to false, users must create a user first before being able to use the search API. -# ALLOW_UNAUTHENTICATED_SEARCH_API=true # --- Regex Filter Access --- # Controls who can use regex filters. diff --git a/packages/core/src/db/schemas.ts b/packages/core/src/db/schemas.ts index d12a9799..5bdfac50 100644 --- a/packages/core/src/db/schemas.ts +++ b/packages/core/src/db/schemas.ts @@ -892,7 +892,6 @@ const StatusResponseSchema = z.object({ customHtml: z.string().optional(), protected: z.boolean(), regexFilterAccess: z.enum(['none', 'trusted', 'all']), - allowUnauthenticatedSearchApi: z.boolean(), allowedRegexPatterns: z .object({ patterns: z.array(z.string()), diff --git a/packages/core/src/utils/env.ts b/packages/core/src/utils/env.ts index e045e20b..5cce6450 100644 --- a/packages/core/src/utils/env.ts +++ b/packages/core/src/utils/env.ts @@ -368,10 +368,6 @@ export const Env = cleanEnv(process.env, { default: true, desc: 'Enable the search API. If true, the search API will be enabled.', }), - ALLOW_UNAUTHENTICATED_SEARCH_API: bool({ - default: true, - desc: 'Allow unauthenticated search API requests. i.e. x-aiostreams-user-data header instead of basic auth', - }), // logging settings LOG_SENSITIVE_INFO: bool({ default: false, diff --git a/packages/server/src/routes/api/search.ts b/packages/server/src/routes/api/search.ts index 046cb8e8..e5648c27 100644 --- a/packages/server/src/routes/api/search.ts +++ b/packages/server/src/routes/api/search.ts @@ -54,7 +54,7 @@ router.get( let userData: UserData | null = null; - if (encodedUserData && Env.ALLOW_UNAUTHENTICATED_SEARCH_API) { + if (encodedUserData) { try { userData = JSON.parse( Buffer.from(encodedUserData, 'base64').toString('utf-8') diff --git a/packages/server/src/routes/api/status.ts b/packages/server/src/routes/api/status.ts index 3cda308e..13c32661 100644 --- a/packages/server/src/routes/api/status.ts +++ b/packages/server/src/routes/api/status.ts @@ -33,7 +33,6 @@ const statusInfo = async (): Promise => { protected: Env.ADDON_PASSWORD.length > 0, tmdbApiAvailable: !!Env.TMDB_ACCESS_TOKEN, regexFilterAccess: Env.REGEX_FILTER_ACCESS, - allowUnauthenticatedSearchApi: Env.ALLOW_UNAUTHENTICATED_SEARCH_API, allowedRegexPatterns: (await FeatureControl.allowedRegexPatterns()).patterns.length > 0 ? {