navidrome/server
Deluan 4298cec37d feat: enforce NowPlaying.AdminOnly on the getNowPlaying endpoint
When NowPlaying.AdminOnly is enabled, non-admin users now receive an empty
list from the Subsonic getNowPlaying endpoint, mirroring how Jukebox.AdminOnly
is enforced server-side. Previously this restriction was only applied in the
web UI and could be bypassed by calling the endpoint directly.

The endpoint otherwise keeps the standard Subsonic behavior of returning what
all users are currently playing, without filtering by the requesting user's
library access.

Signed-off-by: Deluan <deluan@navidrome.org>
2026-06-19 22:24:49 -04:00
..
backgrounds chore(deps): bump golangci-lint to v2.10.0 and suppress new gosec false positives 2026-02-17 09:28:42 -05:00
e2e refactor(lyrics): single ParseLyrics entry point + all-format plugin lyrics (#5632) 2026-06-19 18:25:35 -04:00
events fix(ui): activity Indicator switching constantly between online/offline (#5054) 2026-02-17 14:47:20 -05:00
nativeapi refactor: multiple syntax updates for Go 1.26 2026-05-19 18:02:36 -03:00
public fix(transcoding): cap concurrent transcodes to prevent ffmpeg DoS (#5522) 2026-05-24 00:24:30 -03:00
subsonic feat: enforce NowPlaying.AdminOnly on the getNowPlaying endpoint 2026-06-19 22:24:49 -04:00
testdata fix(server): improve error message for encrypted TLS private keys (#4742) 2025-11-28 17:08:34 -05:00
auth.go refactor: multiple syntax updates for Go 1.26 2026-05-19 18:02:36 -03:00
auth_test.go refactor: run Go modernize (#5002) 2026-02-08 09:57:30 -05:00
initial_setup.go fix(transcoding): include ffprobe in MSI and fall back gracefully when absent (#5326) 2026-04-07 20:11:38 -04:00
initial_setup_test.go Upgrade Ginkgo to V2 2022-07-26 16:53:17 -04:00
middlewares.go refactor: run Go modernize (#5002) 2026-02-08 09:57:30 -05:00
middlewares_test.go feat(ui): show user's lastAccess (#3342) 2024-09-30 20:46:10 -04:00
serve_index.go feat: add configurable visibility control for NowPlaying feature 2026-06-19 22:08:27 -04:00
serve_index_test.go feat: add configurable visibility control for NowPlaying feature 2026-06-19 22:08:27 -04:00
server.go chore(deps): bump golangci-lint to v2.10.0 and suppress new gosec false positives 2026-02-17 09:28:42 -05:00
server_suite_test.go Rename log.LevelCritical to log.LevelFatal 2022-12-21 14:53:36 -05:00
server_test.go ci: run Go tests on Windows (#5380) 2026-04-19 13:16:47 -04:00
throttle_backlog.go chore: go fix 2026-05-28 22:13:05 -03:00
throttle_backlog_test.go fix(test): prevent flaky deadlock in throttle backlog test (#5474) 2026-05-06 11:03:11 -04:00