Remove `authToken` attribute from local server account by JonnyWong16 · Pull Request #1581 · pushingkarmaorg/python-plexapi
Pull request overview
This pull request removes the authToken attribute from the local server Account class in response to a security vulnerability where authentication tokens are no longer returned from the /myplex/account endpoint. This is a breaking change affecting the locally cached MyPlex account information.
Changes:
- Removed
authTokenattribute from theAccountclass documentation and implementation - Updated test assertions to remove checks for
authTokenon local server accounts - The
MyPlexAccountclass retains itsauthTokenattribute as it's a different class
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| plexapi/server.py | Removed authToken attribute from Account class docstring and _loadData method |
| tests/test_myplex.py | Removed assertion for authToken on local server account in test |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.