lllyasviel / lllyasviel/stable-diffusion-webui-forge
[Bug]: gradio auth is pointless (/internal/sysinfo unauthenticated)
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 13k
- Forks
- 1.7k
- PR merge metrics
- No merged PRs in 30d
Description
Checklist
- The issue exists after disabling all extensions
- The issue exists on a clean installation of webui
- The issue is caused by an extension, but I believe it is caused by a bug in the webui
- The issue exists in the current version of the webui
- The issue has not been reported before recently
- The issue has been reported before but has not been fixed yet
What happened?
I'm able to protect my forge server with
Steps to reproduce the problem
- Visit http://192.168.1.1:7860/
- Get username/password prompt
- Go to http://192.168.1.1:7860/internal/sysinfo to get the credentials
What should have happened?
the sysinfo endpoint should be authenticated
What browsers do you use to access the UI ?
Mozilla Firefox
Sysinfo
"COMMANDLINE_ARGS": "--api --listen --gradio-auth user:pass
Console logs
N/A
Additional information
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the issue with --api --listen --gradio-auth user:pass, then inspect the handler for /internal/sysinfo and how authentication is applied to other endpoints. Done means visiting /internal/sysinfo without credentials no longer reveals the information and the authenticated server behavior remains usable.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100