starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-05-30 23:40:40 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

Bug: Root user password can't be changed in WebUI #53

New Issue
Closed
opened 2026-04-24 22:57:16 +02:00 by adam · 3 comments
adam commented 2026-04-24 22:57:16 +02:00
Owner
Copy Link
Copy Source

Originally created by @Sleuth56 on GitHub (Oct 11, 2021).

When setting up a new instance for the first time. The root user's password is set to none.
The WebUI won't allow you to set a new password because it requires a previous password and won't take none as an option.

I see three possible fixes.

  1. On first run generate a password and print that to the console.
  2. Allow password resets with none in the current password field.
  3. Require a password for the root user the first time the WebUI gets loaded.

The Work around

Create a new user account with a password.
List the contents of config/users/data/ open the new .json file. The root user is data.0.json so we want the other one. copy the pash key and past it into the root user's file.
Restart audiobookshelf.
Now refresh the web interface and change the password using the password from the other user account as the current password.

Originally created by @Sleuth56 on GitHub (Oct 11, 2021). When setting up a new instance for the first time. The root user's password is set to none. The WebUI won't allow you to set a new password because it requires a previous password and won't take none as an option. I see three possible fixes. 1. On first run generate a password and print that to the console. 2. Allow password resets with none in the current password field. 3. Require a password for the root user the first time the WebUI gets loaded. ## The Work around Create a new user account with a password. List the contents of `config/users/data/` open the new `.json` file. The root user is `data.0.json` so we want the other one. copy the pash key and past it into the root user's file. Restart audiobookshelf. Now refresh the web interface and change the password using the password from the other user account as the current password.
adam closed this issue 2026-04-24 22:57:16 +02:00
adam commented 2026-04-24 22:57:17 +02:00
Author
Owner
Copy Link
Copy Source

@advplyr commented on GitHub (Oct 12, 2021):

This was a stupid mistake on my part. I was hiding the submit button when the password fields were empty and completely forgot that root can have an empty password.

I just released the fix for this v1.4.6.

@advplyr commented on GitHub (Oct 12, 2021): This was a stupid mistake on my part. I was hiding the submit button when the password fields were empty and completely forgot that root can have an empty password. I just released the fix for this [v1.4.6](https://github.com/advplyr/audiobookshelf/releases/tag/v1.4.6).
adam commented 2026-04-24 22:57:17 +02:00
Author
Owner
Copy Link
Copy Source

@wtanksleyjr commented on GitHub (Jan 13, 2022):

Can you double-check this? The current behavior as of v1.6.57 seems to be that there's no ability to change anything about the root user except its name -- it has no password and cannot be given one, has no access to any collections and cannot be given any; but it can change anything about any other user.

This seems horrid. Surely it's not actually impossible to lock down root, just like I'd be able to delete or modify any other user account when accessing the system as root?

Or am I missing something?

@wtanksleyjr commented on GitHub (Jan 13, 2022): Can you double-check this? The current behavior as of v1.6.57 seems to be that there's no ability to change anything about the root user except its name -- it has no password and cannot be given one, has no access to any collections and cannot be given any; but it can change anything about any other user. This seems horrid. Surely it's not actually impossible to lock down root, just like I'd be able to delete or modify any other user account when accessing the system as root? Or am I missing something?
adam commented 2026-04-24 22:57:17 +02:00
Author
Owner
Copy Link
Copy Source

@wtanksleyjr commented on GitHub (Jan 13, 2022):

OK, I'm missing something - EVERY user, including root, can change their own password by clicking on their own user token in the top right -- it's just that as a new user I didn't know how to do that, but I did know how to click on "users" and see myself uneditable and then realize I can edit other users. So now I know how to change root's password.

@wtanksleyjr commented on GitHub (Jan 13, 2022): OK, I'm missing something - EVERY user, including root, can change their own password by clicking on their own user token in the top right -- it's just that as a new user I didn't know how to do that, but I did know how to click on "users" and see myself uneditable and then realize I can edit other users. So now I know how to change root's password.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
authentication
backlog
bug
chapter editor
config-issue
ebooks
encoding/embedding
enhancement
help wanted
listening sessions & progress
planned
possible plugin
progress sync
pull-request
Mirrored from GitHub Pull Request
 sorting/filtering/searching
unable to reproduce
upload
users & permissions
waiting
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#53
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?