Remove `authToken` attribute from local server account by JonnyWong16 · Pull Request #1581 · pushingkarmaorg/python-plexapi

Pull request overview

This pull request removes the authToken attribute from the local server Account class in response to a security vulnerability where authentication tokens are no longer returned from the /myplex/account endpoint. This is a breaking change affecting the locally cached MyPlex account information.

Changes:

  • Removed authToken attribute from the Account class documentation and implementation
  • Updated test assertions to remove checks for authToken on local server accounts
  • The MyPlexAccount class retains its authToken attribute as it's a different class

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
plexapi/server.py Removed authToken attribute from Account class docstring and _loadData method
tests/test_myplex.py Removed assertion for authToken on local server account in test

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.