Plex oauth not working with Tautulli, Ombi, etc

Dev Community Dev/API Corner
1

I’m experiencing an issue with the Plex sign-in that states “We were unable to complete this request.” when attempting to sign-in to Ombi or Tautulli (uses the Plex login).

There have been a few reports of others experiencing this issue on the Tautulli and Ombi Discord servers.

The request headers:

PUT /api/v2/pins/link HTTP/1.1
Host: plex.tv
Connection: keep-alive
Content-Length: 30
X-Plex-Version: undefined
X-Plex-Platform-Version: undefined
Origin: https://app.plex.tv
X-Plex-Client-Identifier: <snipped-client-identifier>
X-Plex-Device-Name: undefined
X-Plex-Platform: Web
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept: application/json
X-Plex-Token: <snipped-token>
X-Plex-Product: Ombi
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36
X-Plex-Device-Screen-Resolution: undefined
X-Plex-Device: Ombi (Web)
Referer: https://app.plex.tv/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

And response:

{"errors":[{"code":1068,"message":"This action is not available for this device."}]}
9 Likes
2

I did some digging into Plex OAuth and found that it still works when using a value of Plex Web for the following OAuth URL parameter:

context[device][product]=Plex Web

It does not seem like any other URL parameter affects OAuth.

We can patch our apps to identify ourselves as Plex Web, but obviously this isn’t the proper way to fix this. We should be identifying our individual apps with our own product name.

I believe this is an accidental bug in Plex’s authentication. I don’t believe there is any malicious intent.

Edit: The context[device][product] URL parameter is passed to the X-Plex-Product header in the request PUT https://plex.tv//api/v2/pins/link.

In other words, PUT https://plex.tv//api/v2/pins/link requires the exact header X-Plex-Product: Plex Web, otherwise it returns 403 Forbidden.

21 Likes
3

I vote for a correct fix so we don’t have to circumvent your API…

Thanks for finding the culprit @SwiftPanda16

18 Likes
4

same issue here, any update on this?

1 Like
5

Agree with @causefx and @SwiftPanda16 - we should be sending our individual app’s name and not just patching it with Plex Web to make it work.

2 Likes
6

+1 Please look into this.

1 Like
7

Ombi has rolled out an update that implements the fix as described in this reply Plex oauth not working with Tautulli, Ombi, etc

8

There is no such thing. There is the admin account which is already required if you enable OAuth for Tautulli. Also, you can just enter your Plex.tv username/password into the “Login with Tautulli” fields. It will still work.

9

Removed the incorrect info from my reply.

10

Surely this works to the detriment of Plex overall. Since they are forcing 3rd party dev’s that want to support the great product that Plex is by helping the community to perform shady tactics in order to get their applications to work. It puts a bad light on all non-official development and casts us with the same shadow.

2 Likes
11

+1 for a valid fix for this.

1 Like
12

This is almost as breaking as the iFrame change.

Volv… Plex, please fix.

1 Like
13

I am having this issue as well when trying to authenticate my infuse player and Tautulli.

14

Hi everyone, thanks for the report. This broke during some changes we made to increase security around the pin linking endpoint.

We have deployed a fix recently, so it should be working as before in most cases.

13 Likes
15

Thank you! :+1:

5 Likes
16

Perhaps it would be beneficial for you guys to add some unit testing against everything before updates are pushed?

8 Likes
17

But then that would mean that they wouldn’t have more bugs every build. It’d be like they were becoming better each build… What would the world do if both Plex and Emby improved with each new build!!!

18

Sarcasm aside, I believe strongly in unit testing and hope Plex does consider adding more unit tests (assuming they already have some in place, if not then now is a great time to start).

All things considered the bug seems to have been fixed fairly quickly. I’ll be waiting for the release.

2 Likes
19

Plex, please fix Oauth!

20

@ADAMG100 Um read above? Plex oauth not working with Tautulli, Ombi, etc

1 Like