crowdsec: Audiobookshelf native-login detection

mysticalsoap commented

2026-10-07 13:54:47 -04:00

Owner

heed.mysticalsoap.com (PR #376) is Authelia-bypassed with Audiobookshelf's own password login, so brute force is invisible to the forward-auth scenarios, same gap #121 closed for Vaultwarden and Navidrome (#294).

Check whether a failed POST /login returns 401 through Traefik (then http-generic-401-bf already covers it from the access log) or a 200 with an error body (then it needs a parser on the app log like navidrome-auth.yaml).
Audiobookshelf logs to stdout and metadata/logs/; it needs to trust X-Forwarded-For from the media network for the line to carry the client address rather than Traefik's.
Also check the phone-app token endpoint, not only the web form.

heed.mysticalsoap.com (PR #376) is Authelia-bypassed with Audiobookshelf's own password login, so brute force is invisible to the forward-auth scenarios, same gap #121 closed for Vaultwarden and Navidrome (#294). - Check whether a failed `POST /login` returns 401 through Traefik (then `http-generic-401-bf` already covers it from the access log) or a 200 with an error body (then it needs a parser on the app log like `navidrome-auth.yaml`). - Audiobookshelf logs to stdout and `metadata/logs/`; it needs to trust `X-Forwarded-For` from the media network for the line to carry the client address rather than Traefik's. - Also check the phone-app token endpoint, not only the web form.

mysticalsoap added the

audit-work

label

2026-10-07 13:54:47 -04:00

mysticalsoap referenced this issue

2026-10-07 16:11:08 -04:00

media: add audiobook support (bookshelf-audio, audiobookshelf) #376

mysticalsoap commented

2026-10-07 17:02:45 -04:00

Author

Owner

looking at this I think I may just want to disable password login? so that the user experience is cleaner? Might need to consider the implications of that a bit. Like maybe mysticalsoap user should just be an admin account? Maybe with slightly less privileges than true root?

mysticalsoap referenced this issue

2026-10-07 17:47:26 -04:00

docs: audiobookshelf is OIDC-only; no CrowdSec source needed #382

mysticalsoap referenced this issue from a commit

2026-10-07 17:47:28 -04:00

docs: audiobookshelf is OIDC-only; no CrowdSec source needed

mysticalsoap closed this issue

2026-10-07 17:51:35 -04:00

Rows
Columns

crowdsec: Audiobookshelf native-login detection #378