It seems checkAdmin() always returns true. I think this is because /myplex/account doesn't require any authentication to be viewed, so adding a non-admin user X-Plex-Token header won't make the page fail to load outright. I think a possible fix would be to check if user's token matches with the token returned by /myplex/account?
I'm not using Plex Home. I'm only sharing with friends, so this behavior might be different.
It seems checkAdmin() always returns true. I think this is because /myplex/account doesn't require any authentication to be viewed, so adding a non-admin user X-Plex-Token header won't make the page fail to load outright. I think a possible fix would be to check if user's token matches with the token returned by /myplex/account?
I'm not using Plex Home. I'm only sharing with friends, so this behavior might be different.