User Specific Device Accesss Issues

[Jrod696 28]

Here recently I have run into issues where I have a user where their account was locked to a certain device (1 single fire stick selected). It worked perfect they would try to use their phone or get a new amazon device and I would get a call saying hey its not working. However now 2 separate accounts that were locked down like this were able to login, 1 with their android phone and one with their iphone.

They were both old user accounts so am hoping that someone will say you just need to enable all devices save and then restrict the device again or something like that.

its not a huge issue but I figured I would throw it out there and see if it was just me or if it was a known issue.

[Carlo 4561]

Hi, I would check this users access tab when you click on the User's menu then select this user.
At the bottom of that screen is devices they are allowed to use.

[Jrod696 28]

That is what I am referring to I have 2 users who thought it would be ok to share with their friends and I cleared it up that it was not ok to share it and they have not but as extra security I restricted them to just 1 device.

it has worked great for the longest time but recently both users were able to login using their phone even though it was not a selected device in the users>access>devices

 

Edited June 28, 2021 by Jrod696

[Carlo 4561]

What version of the server are you using?

[Jrod696 28]

28 minutes ago, cayars said:

What version of the server are you using?

Version 4.6.3.0

[Carlo 4561]

Thanks, I'm going to try testing with a couple of android phones on my system with revoked access.

[Jrod696 28]

2 minutes ago, cayars said:

Thanks, I'm going to try testing with a couple of android phones on my system with revoked access.

these were new devices that the server had never seen in both cases

previously it wouldn't allow them to connect, i know at least device wise because both people upgraded fire sticks from regular to 4k and it wouldn't work until I temporarily gave them the ability to connect on all devices

Edited June 28, 2021 by Jrod696

[Carlo 4561]

I just checked and if I uncheck either phone device my test user can't log in.

Are these new devices showing as being checked for this user?

 

[Jrod696 28]

2 minutes ago, cayars said:

I just checked and if I uncheck either phone device my test user can't log in.

Are these new devices showing as being checked for this user?

 

Actually i was just looking at the device list and neither device shows in the list at all. There is nothing to check

[Happy2Play 9780]

39 minutes ago, Jrod696 said:

Actually i was just looking at the device list and neither device shows in the list at all. There is nothing to check

That would mean they are not using the app for that device.  So maybe a browser?

[Jrod696 28]

9 minutes ago, Happy2Play said:

That would mean they are not using the app for that device.  So maybe a browser?

I am still waiting to hear back form one person but the other that used an iphone said he just downloaded that app and used that, not the browser. He did say it didnt ask him for any credentials he just downloaded it and it logged him in, which is weird because it identified him on the dashboard with his user and said iphone.

 

[Carlo 4561]

That would be my guess as well.

[Jrod696 28]

ok follow the iphone user said the app was on his phone from a long time ago and it did ask him for just a password which he typed in, but the device does not show in the list.

these kinds of things are why i like the restrictions for some folks.......

Edited June 28, 2021 by Jrod696

[Happy2Play 9780]

So what shows on the Dashboard when that person connects to your server, what active device?

Activity log shows them online, correct?

[Jrod696 28]

16 minutes ago, Happy2Play said:

So what shows on the Dashboard when that person connects to your server, what active device?

Activity log shows them online, correct?

it shows them logged in with their username and the device and the application version. That is how I knew there was an issue, I opened up the dashboard and saw the username logged in on an iphone and thought wait they cant do that so I text him and he said yes im using it on my phone (he just moved no internet).

when i go through the logs I can see the Iphone connected as well but it is not in the device list at all currently.

2021-06-26 00:03:18.725 Info Server: http/1.1 POST https://www.xxxxxxxxxxxxx.com:8990/emby/Users/authenticatebyname?X-Emby-Client=Emby Web&X-Emby-Device-Name=Safari iOS&X-Emby-Device-Id=75708012-f79b-46c4-9968-8c5713fd9d25&X-Emby-Client-Version=4.6.3.4. Connection=keep-alive, Content-Type=application/json, Accept=application/json, Accept-Encoding=gzip, deflate, br, Accept-Language=en-us, Host=www.xxxxxxxxxxxxx.com:8990, Referer=http://app.emby.media/, User-Agent=Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Mobile/15E148 Safari/604.1, Origin=http://app.emby.media, Content-Length=57

 

Edited June 28, 2021 by Jrod696

[Happy2Play 9780]

7 minutes ago, Jrod696 said:

it shows them logged in with their username and the device and the application version. That is how I knew there was an issue, I opened up the dashboard and saw the username logged in on an iphone and thought wait they cant do that so I text him and he said yes im using it on my phone (he just moved no internet).

when i go through the logs I can see the Iphone connected as well but it is not in the device list at all currently.

2021-06-26 00:03:18.725 Info Server: http/1.1 POST https://www.xxxxxxxxxxxxx.com:8990/emby/Users/authenticatebyname?X-Emby-Client=Emby Web&X-Emby-Device-Name=Safari iOS&X-Emby-Device-Id=75708012-f79b-46c4-9968-8c5713fd9d25&X-Emby-Client-Version=4.6.3.4. Connection=keep-alive, Content-Type=application/json, Accept=application/json, Accept-Encoding=gzip, deflate, br, Accept-Language=en-us, Host=www.xxxxxxxxxxxxx.com:8990, Referer=http://app.emby.media/, User-Agent=Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Mobile/15E148 Safari/604.1, Origin=http://app.emby.media, Content-Length=57

 

But that show the user using Safari not the IOS app

My iphone connection

2021-06-28 15:39:05.543 Info Server: http/1.1 GET http://myserver:8096/emby/users/public?X-Emby-Client=Emby%20for%20iOS&X-Emby-Device-Name=iPhone&X-Emby-Device-Id=5CC5A9A2-77B1-40C9-AAA7-5D533D7FB920&X-Emby-Client-Version=2.0.8. UserAgent: Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148

 

[Jrod696 28]

10 minutes ago, Happy2Play said:

But that show the user using Safari not the IOS app

My iphone connection

2021-06-28 15:39:05.543 Info Server: http/1.1 GET http://myserver:8096/emby/users/public?X-Emby-Client=Emby%20for%20iOS&X-Emby-Device-Name=iPhone&X-Emby-Device-Id=5CC5A9A2-77B1-40C9-AAA7-5D533D7FB920&X-Emby-Client-Version=2.0.8. UserAgent: Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148

does it not also show the app being used as well? Referer=http://app.emby.media/, User-Agent

I double checked he says he for sure went to the app only.

[Happy2Play 9780]

3 minutes ago, Jrod696 said:

does it not also show the app being used as well? Referer=http://app.emby.media/, User-Agent

I double checked he says he for sure went to the app only.

Dev may have to comment more but to me that show they logged in via a browser using the online web client ie a Browser and not the standalone app designed specifically for IOS.

So did they download the app from the app store or are they launching Safari?

 

[Jrod696 28]

1 minute ago, Happy2Play said:

Dev may have to comment more but to me that show they logged in via a browser using the online web client ie a Browser and not the standalone app designed specifically for IOS.

So did they download the app from the app store or are they launching Safari?

 

the app was downloaded from the app store and loaded from the icon on the iphone screen.

Also

I was just thinking about this thread and it posed a question along the same lines, If there is a section for users to control devices and they can just login with a web browser and not the app doesnt that make the whole option useless or a security risk?

[Luke 42078]

6 minutes ago, Happy2Play said:

Dev may have to comment more but to me that show they logged in via a browser using the online web client ie a Browser and not the standalone app designed specifically for IOS.

So did they download the app from the app store or are they launching Safari?

 

Yes that is the Emby web app.

[Happy2Play 9780]

So Active devices show Emby for iPhone as the is the App or Safari iOS is the Browser?  They are not the same.

[Luke 42078]

3 minutes ago, Jrod696 said:

the app was downloaded from the app store and loaded from the icon on the iphone screen.

Also

I was just thinking about this thread and it posed a question along the same lines, If there is a section for users to control devices and they can just login with a web browser and not the app doesnt that make the whole option useless or a security risk?

The browser and the app are two separate devices as far as your Emby Server is concerned. There is no way to know they're coming from the same device, so you have to configure them independently.

[Jrod696 28]

the issue i have is I have nothing in the devices section that says iphone or even safari ios at all, there is nothing to check, in the list of the user the only thing selected was his firestick everything else was unchecked, previously if you tried to login and it was not that device it wouldnt work, this weekend he had no issues, nothing changed in the settings for the user so i am not sure what is going on.

Edited June 28, 2021 by Jrod696

[Happy2Play 9780]

2 minutes ago, Jrod696 said:

the issue i have is I have nothing in the devices section that says iphone at all, there is nothing to check, in the list of the user the only thing selected was his firestick everything else was unchecked, previously if you tried to login and it was not that device it wouldnt work, this weekend he had no issues, nothing changed in the settings for the user so i am not sure what is going on.

Because the iphone is not making access, Safafi is.  So are you saying Safari does not show up?

[Jrod696 28]

8 minutes ago, Happy2Play said:

Because the iphone is not making access, Safafi is.  So are you saying Safari does not show up?

correct, it is not in the device list, there are 19 devices, I can account for everything in the list accept for the iphone that logged in on saturday, and the other user that logged in using an S21, I remember that one said galaxy s21 and he was limited too but that was like a month ago and he couldnt remember but said it was probably the app because he remembered downloading it from google play and its on his phone but i dont have those logs anymore.

 

i do remember it saying samsung s21 or something along those lines but cant say for sure, but neither is in the list,