lllyasviel / lllyasviel/stable-diffusion-webui-forge

[Bug]: gradio auth is pointless (/internal/sysinfo unauthenticated)

Open
#797 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
13k
Forks
1.7k
PR merge metrics
No merged PRs in 30d

Description

Checklist
  • The issue exists after disabling all extensions
  • The issue exists on a clean installation of webui
  • The issue is caused by an extension, but I believe it is caused by a bug in the webui
  • The issue exists in the current version of the webui
  • The issue has not been reported before recently
  • The issue has been reported before but has not been fixed yet
What happened?

I'm able to protect my forge server with

Steps to reproduce the problem
  1. Visit http://192.168.1.1:7860/
  2. Get username/password prompt
  3. Go to http://192.168.1.1:7860/internal/sysinfo to get the credentials
What should have happened?

the sysinfo endpoint should be authenticated

What browsers do you use to access the UI ?

Mozilla Firefox

Sysinfo

"COMMANDLINE_ARGS": "--api --listen --gradio-auth user:pass

Console logs
N/A
Additional information

No response

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the issue with --api --listen --gradio-auth user:pass, then inspect the handler for /internal/sysinfo and how authentication is applied to other endpoints. Done means visiting /internal/sysinfo without credentials no longer reveals the information and the authenticated server behavior remains usable.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.