Repository navigation
Add server selection and API-key login to the desktop player - #76
Merged
Merged
Conversation
…hand the session to the player
…an unreachable server, bound and upgrade the probe
…ound the /me bootstrap
…omposable and bound the logout request
…top retrying it in the app and reset the subsonic client whole
…dened gate and track the review's follow-ups
…'s mint flag an expiry after a server switch
…cord two review follow-ups
…der in step with the gate
…at Remove can do there
…he kind that asked
…what the key paths do
…ase and IPv6 literals alike
… event test and comment
…ttings atomically and make the cookie jar owner-only
…retry sends the new key to the old server
…n a detail view fails to load
…lash and assert it reaches .vue files
…e server's question promise only what it does
…nother, and label and focus the server step
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
The desktop player opened the shared web UI at a
tauri://origin, where it found no server, so the shipped bundles could not play music. The app now asks for an Aether server, signs in as the browser does or with a pasted API key (the only way into a server behind an auth portal), and remembers the server without storing a password.What
settings.json. Change server in both account menus goes back to that step, and About gains App and Server rows./api/v0and/restcall goes throughtauri-plugin-http, which keeps an owner-only cookie jar. The webview's origin never sends the server'sSameSite=Laxcookie.<audio>and<img>still load straight from the server, so the CSP now allows them.getUseropens a/rest-only session, also offered on native servers. The key is stored owner-only incredentials.json. Features that need/api/v0hide behinduseAuth().managementApi, and a revoked or expired key brings the key card back.connection.jsonand theconnect/disconnectcommands are gone (no migration). A testedSessionowns the settings, the key and the Rust client. The core client gains API-key auth and URL normalisation that refuses embedded credentials.webui/src/lib/host/is the only code that imports@tauri-apps/*or readslocation.origin(pinned byoriginAgnostic.spec.ts), so the browser keeps its own origin and fetch. The tray's Play/Pause and Next now drive the webview player.Notes
<audio>. The Rust engine,aether://covers and the browsing IPC commands stay unused until the playback retrofit.TODO.md: administering a portal server and the metadata editor's picture previews.