TheLanc3/YoutubeDL-Material
1
0
Fork 0
mirror of https://github.com/Tzahi12345/YoutubeDL-Material.git synced 2026-04-21 03:43:20 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fixed bug where non-shared videos could be viewed by others

Browse Source 
Fixed bug where non-users couldn't download a shared video
This commit is contained in:
Isaac Abadi
2020-08-12 16:23:28 -04:00
parent d49a67dfd0
commit 945ba268fb
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
backend/app.js
View File

@@ -1866,7 +1866,8 @@ const optionalJwt = function (req, res, next) {
const uuid = using_body ? req.body.uuid : req.query.uuid; const uuid = using_body ? req.body.uuid : req.query.uuid;
const uid = using_body ? req.body.uid : req.query.uid; const uid = using_body ? req.body.uid : req.query.uid;
const type = using_body ? req.body.type : req.query.type; const type = using_body ? req.body.type : req.query.type;
const is_shared = !req.query.id ? auth_api.getUserVideo(uuid, uid, type, true) : auth_api.getUserPlaylist(uuid, req.query.id, null, true); const file = !req.query.id ? auth_api.getUserVideo(uuid, uid, type, true, req.body) : auth_api.getUserPlaylist(uuid, req.query.id, null, true);
const is_shared = file ? file['sharingEnabled'] : false;
if (is_shared) { if (is_shared) {
req.can_watch = true; req.can_watch = true;
return next(); return next();
@@ -2579,9 +2580,10 @@ app.post('/api/downloadFile', optionalJwt, async (req, res) => {
let base_path = fileFolderPath; let base_path = fileFolderPath;
let usersFileFolder = null; let usersFileFolder = null;
if (req.isAuthenticated()) { const multiUserMode = config_api.getConfigItem('ytdl_multi_user_mode');
if (multiUserMode && req.body.uuid) {
usersFileFolder = config_api.getConfigItem('ytdl_users_base_path'); usersFileFolder = config_api.getConfigItem('ytdl_users_base_path');
base_path = path.join(usersFileFolder, req.user.uid, type); base_path = path.join(usersFileFolder, req.body.uuid, type);
} }
if (!subscriptionName) { if (!subscriptionName) {
file = path.join(__dirname, base_path, fileNames + ext); file = path.join(__dirname, base_path, fileNames + ext);