{"action":"created","issue":{"url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/issues/788","repository_url":"https://api.github.com/repos/tidusjar/PlexRequests.Net","labels_url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/issues/788/labels{/name}","comments_url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/issues/788/comments","events_url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/issues/788/events","html_url":"https://github.com/tidusjar/PlexRequests.Net/issues/788","id":196055006,"number":788,"title":"Big security problem with admin login","user":{"login":"bjonness406","id":4106070,"avatar_url":"https://avatars.githubusercontent.com/u/4106070?v=3","gravatar_id":"","url":"https://api.github.com/users/bjonness406","html_url":"https://github.com/bjonness406","followers_url":"https://api.github.com/users/bjonness406/followers","following_url":"https://api.github.com/users/bjonness406/following{/other_user}","gists_url":"https://api.github.com/users/bjonness406/gists{/gist_id}","starred_url":"https://api.github.com/users/bjonness406/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bjonness406/subscriptions","organizations_url":"https://api.github.com/users/bjonness406/orgs","repos_url":"https://api.github.com/users/bjonness406/repos","events_url":"https://api.github.com/users/bjonness406/events{/privacy}","received_events_url":"https://api.github.com/users/bjonness406/received_events","type":"User","site_admin":false},"labels":[{"id":470694417,"url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/labels/hotfix%20needed","name":"hotfix needed","color":"fc2929","default":false},{"id":479342379,"url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/labels/Priority","name":"Priority","color":"fc2929","default":false},{"id":492021873,"url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/labels/Stable%20branch","name":"Stable branch","color":"006b75","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-12-16T13:04:26Z","updated_at":"2016-12-16T20:23:32Z","closed_at":null,"body":"If this is a bug report please make sure you have filled the following in:\r\n(If it's not a bug and a feature request then just remove the below)\r\n\r\n#### Plex Requests.Net Version:\r\n1.10.0\r\n#### update Branch:\r\nStable\r\n\r\n#### Operating System:\r\nDocker\r\n\r\n#### Reproduction Steps:\r\n\r\nDon't enable user authentication and disable \"require users to login with their passwords\", so that everyone can login with any username they want, and without a password. \r\n\r\nAfter this, log out, then log in from the landing page (not the admin login), here you type in the username of admin. You are now logged in as the admin user, without typing the password as you would normaly do in the admin login page!\r\nNow you have access to everything on plexrequest on the server, even the admin settings.\r\n\r\n\r\nLogs:\r\n```\r\nWe are authenticated! Setting session.\tPlexRequests.UI.Modules.UserLoginModule\tDebug\t12/16/2016 1:59:51 PM\r\n\r\nNo need to auth\tPlexRequests.UI.Modules.UserLoginModule\tDebug\t12/16/2016 1:59:51 PM\r\n\r\nUsername \"Bjonness406\" attempting to login\tPlexRequests.UI.Modules.UserLoginModule\tDebug\t12/16/2016 1:59:51 PM\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/issues/comments/267687499","html_url":"https://github.com/tidusjar/PlexRequests.Net/issues/788#issuecomment-267687499","issue_url":"https://api.github.com/repos/tidusjar/PlexRequests.Net/issues/788","id":267687499,"user":{"login":"tidusjar","id":6642220,"avatar_url":"https://avatars.githubusercontent.com/u/6642220?v=3","gravatar_id":"","url":"https://api.github.com/users/tidusjar","html_url":"https://github.com/tidusjar","followers_url":"https://api.github.com/users/tidusjar/followers","following_url":"https://api.github.com/users/tidusjar/following{/other_user}","gists_url":"https://api.github.com/users/tidusjar/gists{/gist_id}","starred_url":"https://api.github.com/users/tidusjar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tidusjar/subscriptions","organizations_url":"https://api.github.com/users/tidusjar/orgs","repos_url":"https://api.github.com/users/tidusjar/repos","events_url":"https://api.github.com/users/tidusjar/events{/privacy}","received_events_url":"https://api.github.com/users/tidusjar/received_events","type":"User","site_admin":false},"created_at":"2016-12-16T20:23:32Z","updated_at":"2016-12-16T20:23:32Z","body":"Would you guys be against me removing the option to have no authentication?"}}
{"actor":{"display_login":"tidusjar"}}