Is it possible to get the mail notifications and stuff translated to Danish? Can i do this myself somewhere in the files? :-/
@tidusjar said:
@honkdazzle said:
@tidusjar said:
@honkdazzle said:
I’m a bit concerned about the security situation with Ombi. Nobody should be inputting their Plex username and password into a form unless it’s on plex.tv. This software is conditioning people to enter their password into forms on other people’s servers, which is a bad idea. If I’m a user who also operates his own Plex server, I’m definitely not logging into a random person’s Ombi page with my Plex credentials that would potentially give away administrative access.No one has forced you to use this application. I do not store any user credentials when it comes to the Plex.Tv integration, all that happens is I call out to Plex’s API to sign the user in. If you are curious, don’t forget the code is available, it’s open source.
What this really needs is SSO with Plex. But I am not sure Plex has this. Currently in this very forum there’s a stickied thread that actually encourages 3rd party services to proxy plaintext user credentials, which creates situations just like this. Plex needs to have an on-site, branded sign-in page that generates a token and passes it back to the requesting app/service/whatever.
I agree with the above
I know local users are a thing but are pretty tedious. It’s honestly easier to just use basic auth with nginx and reverse proxy it.
I also noticed the wiki on Ombi’s github for Debian/Ubuntu installation recommends running Ombi as root (very bad idea).
The Debian/Ubuntu documentation is all community provided, if you have a better way of doing it then you are welcome to edit that page.
It’s not an attack on the trustworthiness of your code in your repo. The issue is that people logging into an Ombi instance on someone else’s server have no idea whether they can trust that running code with their Plex credentials.
Ok, thanks for raising your concern. But there is not much I can do about this.
Actually, I think there is. Couldn’t you use the PIN service that Plex provides for clients?
Here’s OpenPHT’s implementation:
Here’s another implementation in Python:
Look at get_signin_pin and check_signin_status.
It looks like you need:
- Necessary headers for each request. UUID for unique clients that you should cache – not clear to me if this should be specific to the Ombi instance and stored server side or if it’s supposed to be per-Plex-account-per-instance. Probably the former. So you need to generate that UUID once and store it in your config someplace.
- Post to https://plex.tv/pins.xml on the backend to get a unique PIN to display to your user and save the associated pin ID
- Start polling with an XHR to https://plex.tv/pins/{pin ID}.xml until you get an auth token, error, or eventually time them out
- Send the user to https://plex.tv/link/ in a new tab
- Use your new auth token (you already do this with plaintext logins)
This will get you your auth token using “official” channels.
The code is open source. Currently I do not have time to do this. But you are welcome to create a pull request
First of all, thanks a lot for your work on this project. Ombi really is great and a lot of my users love it.
Is it possible to get the Sonarr calendar to be shown to users inside Ombi? It is one of the really nice features of Sonarr and it would be great information for users waiting for new episodes on already requested and added TV-shows.
Hello
Is it possible to indicate the name of the release once the request is found?
thank you
@williamray507 said:
I have an issue with TV Requests. When anyone requests a show it will make the request but it will not actually show anything in the web interface.This is when there are no requests at all:
And this is what shows up when a some one has made a request:
Is anyone else having this issue? It cleared up but after the latest update (2.2.1591) it is back. ![]()
Ok so it seems this is only happening if I use a reverse proxy, if i access it at http://hostname.local/newrequest it is blank but if i use http://hostname.local:3579/newrequest it works.
Installed the update, now it hard locks on my box about 20 seconds after the app starts. Tried to go and tell it to not do advanced search because that’s whats causing the freeze, but every time the app starts up again the box is checked. Any suggestions besides nuking my database and starting from scratch? I would rather just nuke the database than deal with a sql editor.
Ubuntu 16.04.2 64bit
Mono 4.2.3
Edit: Seems to stop around or on the exact same move every time as well.
@williamray507 said:
Ok so it seems this is only happening if I use a reverse proxy, if i access it at http://hostname.local/newrequest it is blank but if i use http://hostname.local:3579/newrequest it works.
@tidusjar is there anything you can suggest about my issue above?
Just stepped by to thank you and to make a little improvement suggestion. I would recommend a simple plugin for browsers with a “Request an item or report a bug” button. This would be awesone!
And then vice versa to be able to open Plex from Omni 
If none has skills for it maybe someone has javascript skills. There is an plugin for browsers called greasemonkey that uses javascript and could definitly do that by injecting a custom button into any website that was defined in the script before.
Once greasemonkey and the script are installed it would make life much easier for every user.
I have used greasemonkey for a skin modding tool of the game league of legends and also for a web game command & conquer alliances where you get extra functionality to the website when a script plugin is enabled.
But im absolutely an no developer due to insufficient programming skills… Someone on it?
It mostly work on pc but on phone its impossible. You need a Mobil theme.
I also find the requests list don’t always show and the movie ap never works on either platform.