Request : OPDS account linked to app accounts with different OPDS to different libraries

[Draky50110]

Hello.

I've created user1 which can access library1 and user2 with access to library2.

Is it possible to create a different access to OPDS linked to accounts and libraries, instead of a common user which can access all libraries without filtering ?

[Kernald]

Overall, I find the authentication around OPDS a bit confusing - it seems tied to the BookLore instance, as far as I can tell, rather than tied to the user? Having a way to create an OPDS-specific user makes kind of sense (I don't know how OIDC users would work otherwise), but really it feels like it should be simplified by just allowing users to create API tokens limited to specific libraries etc.

[ameer4]

Yes, I need this feature for my kids!
I don't want them to view my entire library, I just want them to view their own library in their own app.

[vincentsaluzzo]

Definitely require this feature too. I would like to use separate library for the familly but I can use OPDS reader in that case as we can't associate library to OPDS user :(

[raygan]

I migrated from CWA to Booklore to separate my books into multiple libraries and share different subsets with different users. It works great, but OPDS access is a gaping hole in that security. All users can see ALL content via OPDS. Not great!

[acx10]

This is already implemented. OPDS accounts are linked to BookLore user accounts and inherit their library permissions.

Setup:

1. Create a BookLore user (e.g., kids)
2. Assign only the libraries you want them to access
3. Go to Settings -> OPDS and create an OPDS account for that user

The OPDS feed will only show books from the libraries assigned to that user. Each family member can have their own BookLore user with different library access and separate OPDS credentials.

[raygan]

I've tested this in v1.18.5 several times by creating several test users and it doesn't seem to be working as expected. Here's what I'm seeing:

Created a test user with minimal permissions. Username "test".

Here you can see that this "test" user as well as my other users do NOT have access to the "Adult" library, while my admin user does.

Created an OPDS user with the same username and password as my "test" user.

Logged in with an OPDS client, in this case Readest

Result: User can see all libraries and content.

Am I missing something, or should I submit this as a bug?