Logged in automatically without being asked for username or password

[davin900]

Hi

I just set this up for the first time on my Kindle Paperwhite 2021 and the first time I accessed the landing page via browser it did not actually ask me for a username or password at all.

I also see that I’m logged in as a user named koreader not admin as the documentation seems to say is the default.

So I’m automatically logged in as an administrator user with full access to the entire file system.

I found the same result logging in via desktop and my phone’s browser.

Also; I don’t see how to log out? I was hoping to delete the default user after creating a new one with admin privileges. I created the new admin but can’t figure out how to log out of user koreader.

Thanks love it so far. Will just keep it off in settings until I need it for security reasons.

[shuvashish76]

Yes same issues with me. It used to work in some previous version. Just fresh installed now I got the same issue as above.

[patelneeraj]

This part in the main.lua file is disabling the auth:

    local disable_auth_cmd = string.format("%s -d %s -c %s config set --auth.method=noauth", bin_path, db_path, config_path) .. silence_cmd
    logger.dbg("set_noauth:", disable_auth_cmd)
    status = status + os.execute(disable_auth_cmd)
    logger.dbg("status:", status)

I don't know why is this in the production. It looks more like something the developer did while testing. Commenting these lines will lead to correct behavior with default username: koreader and password: koreader123456789

You can open the plugin directory in your device, open main.lua and comment those lines by adding -- in the beginning of each line. Just make sure to delete the db file(filebrowser-new.db) in the same directory for this to take effect.

The plugin is pretty much complete. If there were more potential additions or improvements, I would have forked it but doing that only for this issue seems a bit overkill.