Replaces the plugin template with a working plugin that lets several users share one viewing account while keeping their individual watched lists accurate. Three pieces: - Auto-creating groups. Logging in as "alice+bob" with any named member's own password provisions the shared account and signs you in. Verified against 10.11.5: AuthenticateUser offers unmatched usernames to every enabled provider and re-queries afterwards, which is the hook this relies on. Gated on a real member password so knowing two usernames is not enough to create an account. - Multi-password authentication. IRequiresResolvedUser hands us the resolved shared account; each member's live stored hash is checked via ICryptoProvider.Verify. Deliberately avoids re-entering UserManager.AuthenticateUser, which would trip every member's failed-attempt counter whenever a different member's password matched. - One-way played-state sync. Shared account to members only, filtered to PlaybackFinished/TogglePlayed/Import so playback progress ticks are ignored. No loop guard needed: member writes carry a non-shared id. Membership is stored as user IDs rather than re-parsed from the username, so shared accounts can be renamed freely. The +/name collision resolves itself because Jellyfin only consults the plugin when no local user matches the typed name. Targets Jellyfin 10.11.x / net9.0. Adds Gitea CI (test, build, release), a builder image, and 34 tests covering the auth and sync rules.
263 lines
13 KiB
HTML
263 lines
13 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<title>Watched Together</title>
|
|
</head>
|
|
<body>
|
|
<div id="WatchedTogetherConfigPage" data-role="page" class="page type-interior pluginConfigurationPage"
|
|
data-require="emby-input,emby-button,emby-select,emby-checkbox">
|
|
<div data-role="content">
|
|
<div class="content-primary">
|
|
|
|
<div class="verticalSection">
|
|
<h2 class="sectionTitle">Watched Together</h2>
|
|
<p class="fieldDescription">
|
|
A shared account that several people log into with their own passwords. Anything
|
|
marked watched there is mirrored onto each member's own account.
|
|
This is not synchronized playback — for that, use Jellyfin's built-in SyncPlay.
|
|
</p>
|
|
</div>
|
|
|
|
<div class="verticalSection">
|
|
<h3 class="sectionTitle">Existing groups</h3>
|
|
<div id="groupsList"></div>
|
|
</div>
|
|
|
|
<div class="verticalSection">
|
|
<h3 class="sectionTitle">Create a group</h3>
|
|
<form id="CreateGroupForm">
|
|
<div class="inputContainer">
|
|
<label class="inputLabel inputLabelUnfocused" for="NewGroupName">Account name</label>
|
|
<input id="NewGroupName" name="NewGroupName" type="text" is="emby-input" />
|
|
<div class="fieldDescription">
|
|
Leave blank to join the member names with the separator below. Names are
|
|
cosmetic — membership is tracked internally, not parsed from the name.
|
|
</div>
|
|
</div>
|
|
|
|
<div class="selectContainer">
|
|
<label class="selectLabel" for="MemberSelect">Members (select at least two)</label>
|
|
<select is="emby-select" id="MemberSelect" multiple size="8"
|
|
class="emby-select-withcolor emby-select"></select>
|
|
<div class="fieldDescription">
|
|
Any selected member's password will unlock the shared account.
|
|
</div>
|
|
</div>
|
|
|
|
<div class="checkboxContainer checkboxContainer-withDescription">
|
|
<label class="emby-checkbox-label">
|
|
<input id="EnableAllFolders" type="checkbox" is="emby-checkbox" checked />
|
|
<span>Grant access to all libraries</span>
|
|
</label>
|
|
<div class="fieldDescription">
|
|
The shared account's library access is independent of each member's own
|
|
restrictions. If a member is normally blocked from a library but this
|
|
account is not, their password now reaches it.
|
|
</div>
|
|
</div>
|
|
|
|
<div>
|
|
<button is="emby-button" type="submit" class="raised button-submit block emby-button">
|
|
<span>Create group</span>
|
|
</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
|
|
<div class="verticalSection">
|
|
<h3 class="sectionTitle">Settings</h3>
|
|
<form id="SettingsForm">
|
|
<div class="checkboxContainer checkboxContainer-withDescription">
|
|
<label class="emby-checkbox-label">
|
|
<input id="EnableDynamicGroups" type="checkbox" is="emby-checkbox" />
|
|
<span>Create groups automatically at login</span>
|
|
</label>
|
|
<div class="fieldDescription">
|
|
Typing an unrecognised name like <code>alice+bob</code> at the login
|
|
screen creates the shared account on the spot. Every name must belong to
|
|
an existing, enabled user, and the password must be one of theirs.
|
|
An existing account whose name contains the separator always wins.
|
|
</div>
|
|
</div>
|
|
|
|
<div class="checkboxContainer checkboxContainer-withDescription">
|
|
<label class="emby-checkbox-label">
|
|
<input id="DynamicGroupsEnableAllFolders" type="checkbox" is="emby-checkbox" />
|
|
<span>Auto-created accounts can access all libraries</span>
|
|
</label>
|
|
<div class="fieldDescription">
|
|
Turn this off to have auto-created accounts start with no library access
|
|
until you grant it.
|
|
</div>
|
|
</div>
|
|
|
|
<div class="inputContainer">
|
|
<label class="inputLabel inputLabelUnfocused" for="NameSeparator">Name separator</label>
|
|
<input id="NameSeparator" name="NameSeparator" type="text" is="emby-input" maxlength="3" />
|
|
<div class="fieldDescription">
|
|
Joins member names into an account name, and is the character split at
|
|
login above. '+' is valid on current Jellyfin; use '_' or '-' if your
|
|
server rejects it.
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<button is="emby-button" type="submit" class="raised button-submit block emby-button">
|
|
<span>Save</span>
|
|
</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
|
|
<script type="text/javascript">
|
|
(function () {
|
|
var pluginUniqueId = 'aa3288a0-e8c1-43e2-8045-8c3411142a5b';
|
|
var page;
|
|
|
|
function apiUrl(path) {
|
|
return ApiClient.getUrl('Plugins/WatchedTogether/' + path);
|
|
}
|
|
|
|
function loadEligibleUsers() {
|
|
return ApiClient.getJSON(apiUrl('EligibleUsers')).then(function (users) {
|
|
var select = page.querySelector('#MemberSelect');
|
|
select.innerHTML = users.map(function (u) {
|
|
return '<option value="' + u.UserId + '">' + u.Username + '</option>';
|
|
}).join('');
|
|
});
|
|
}
|
|
|
|
function renderGroups(groups) {
|
|
var container = page.querySelector('#groupsList');
|
|
|
|
if (!groups.length) {
|
|
container.innerHTML = '<p class="fieldDescription">No groups configured yet.</p>';
|
|
return;
|
|
}
|
|
|
|
container.innerHTML = groups.map(function (g) {
|
|
var members = g.Members.map(function (m) { return m.Username; }).join(', ');
|
|
var status = g.IsDisabled ? ' <span style="opacity:.7">(disabled)</span>' : '';
|
|
return '<div class="listItem" style="padding:.6em 0;border-bottom:1px solid rgba(255,255,255,.1)">' +
|
|
'<h3 style="margin:0">' + g.SharedUsername + status + '</h3>' +
|
|
'<div class="fieldDescription">Members: ' + members + '</div>' +
|
|
'<div class="fieldDescription">' +
|
|
'Sync unwatched: ' + (g.SyncUnwatched ? 'yes' : 'no') +
|
|
' · Sync play count: ' + (g.SyncPlayCount ? 'yes' : 'no') + '</div>' +
|
|
'<button is="emby-button" type="button" class="raised btnDeleteGroup" ' +
|
|
'data-id="' + g.SharedUserId + '" data-name="' + g.SharedUsername + '">' +
|
|
'<span>Delete</span></button>' +
|
|
'</div>';
|
|
}).join('');
|
|
|
|
container.querySelectorAll('.btnDeleteGroup').forEach(function (btn) {
|
|
btn.addEventListener('click', function () {
|
|
var id = btn.getAttribute('data-id');
|
|
var name = btn.getAttribute('data-name');
|
|
// Deleting the account too is destructive, so make it an explicit choice.
|
|
Dashboard.confirm(
|
|
'Also delete the shared account "' + name + '"? Choose Cancel to keep the account and only remove the group.',
|
|
'Delete group',
|
|
function (deleteUser) {
|
|
var url = apiUrl('Groups/' + id + '?deleteSharedUser=' + (deleteUser ? 'true' : 'false'));
|
|
ApiClient.ajax({ type: 'DELETE', url: url }).then(function () {
|
|
Dashboard.alert('Group deleted.');
|
|
loadGroups();
|
|
loadEligibleUsers();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
}
|
|
|
|
function loadGroups() {
|
|
return ApiClient.getJSON(apiUrl('Groups')).then(renderGroups);
|
|
}
|
|
|
|
document.querySelector('#WatchedTogetherConfigPage').addEventListener('pageshow', function () {
|
|
page = this;
|
|
Dashboard.showLoadingMsg();
|
|
|
|
Promise.all([
|
|
loadGroups(),
|
|
loadEligibleUsers(),
|
|
ApiClient.getPluginConfiguration(pluginUniqueId).then(function (config) {
|
|
page.querySelector('#NameSeparator').value = config.NameSeparator || '+';
|
|
page.querySelector('#EnableDynamicGroups').checked = config.EnableDynamicGroups;
|
|
page.querySelector('#DynamicGroupsEnableAllFolders').checked = config.DynamicGroupsEnableAllFolders;
|
|
})
|
|
]).then(function () {
|
|
Dashboard.hideLoadingMsg();
|
|
}, function () {
|
|
Dashboard.hideLoadingMsg();
|
|
});
|
|
});
|
|
|
|
document.querySelector('#CreateGroupForm').addEventListener('submit', function (e) {
|
|
e.preventDefault();
|
|
|
|
var selected = Array.prototype.slice
|
|
.call(page.querySelector('#MemberSelect').selectedOptions)
|
|
.map(function (o) { return o.value; });
|
|
|
|
if (selected.length < 2) {
|
|
Dashboard.alert('Select at least two members.');
|
|
return false;
|
|
}
|
|
|
|
Dashboard.showLoadingMsg();
|
|
|
|
ApiClient.ajax({
|
|
type: 'POST',
|
|
url: apiUrl('Groups'),
|
|
contentType: 'application/json',
|
|
data: JSON.stringify({
|
|
MemberUserIds: selected,
|
|
Name: page.querySelector('#NewGroupName').value || null,
|
|
EnableAllFolders: page.querySelector('#EnableAllFolders').checked,
|
|
EnabledFolders: null
|
|
})
|
|
}).then(function () {
|
|
Dashboard.hideLoadingMsg();
|
|
Dashboard.alert('Group created.');
|
|
page.querySelector('#NewGroupName').value = '';
|
|
loadGroups();
|
|
loadEligibleUsers();
|
|
}, function (response) {
|
|
Dashboard.hideLoadingMsg();
|
|
if (response && response.text) {
|
|
response.text().then(function (msg) {
|
|
Dashboard.alert({ title: 'Could not create group', message: msg });
|
|
});
|
|
} else {
|
|
Dashboard.alert('Could not create group.');
|
|
}
|
|
});
|
|
|
|
return false;
|
|
});
|
|
|
|
document.querySelector('#SettingsForm').addEventListener('submit', function (e) {
|
|
e.preventDefault();
|
|
Dashboard.showLoadingMsg();
|
|
|
|
ApiClient.getPluginConfiguration(pluginUniqueId).then(function (config) {
|
|
config.NameSeparator = page.querySelector('#NameSeparator').value || '+';
|
|
config.EnableDynamicGroups = page.querySelector('#EnableDynamicGroups').checked;
|
|
config.DynamicGroupsEnableAllFolders = page.querySelector('#DynamicGroupsEnableAllFolders').checked;
|
|
ApiClient.updatePluginConfiguration(pluginUniqueId, config).then(function (result) {
|
|
Dashboard.processPluginConfigurationUpdateResult(result);
|
|
});
|
|
});
|
|
|
|
return false;
|
|
});
|
|
})();
|
|
</script>
|
|
</div>
|
|
</body>
|
|
</html>
|