fix: previous SSRF broke PIN verification

2025-04-18 01:13:52 +02:00
parent f5089502b9
commit acc059c0aa
1 changed files with 4 additions and 1 deletions
--- a/server/api/plextv.ts
+++ b/server/api/plextv.ts
@@ -377,11 +377,14 @@ class PlexTvAPI extends ExternalAPI {
    profileId: string,
    pin: string
  ): Promise<boolean> {
+    const urlPath = `/api/v2/home/users/${profileId}/switch`;
+
    try {
      const response = await axios.post(
-        `https://clients.plex.tv/api/v2/home/users/${profileId}/switch`,
+        urlPath,
        { pin },
        {
+          baseURL: 'https://clients.plex.tv',
          headers: {
            Accept: 'application/json',
            'Content-Type': 'application/json',