When a PMS is not set to require authentication for local traffic (its default setting), or the PMS is accessed via a local address (127.0.0.1), it skips validation of an authentication token, even if one is passed (a bad token will work just as well as no token).
Is there an API for validating an authentication token with a PMS, even if the server doesn't require authentication from the machine requesting it?
Something like:
http://pms:32400/validate?X-Plex-Token=[authentication_token]
With a 401 response if the authentication token is invalid, even if the request was local and the PMS allows unrestricted local access, or with 200 response if the token is valid.
