WebUI, login credentials

If you run qBittorrent in / with Docker.
Post Reply
Arelius
Newbie
Newbie
Posts: 6
Joined: Tue Apr 09, 2024 11:18 am

WebUI, login credentials

Post by Arelius »

Hi all,

Is it possible to go around the WebUI login page by using any of these?

- WEBUI_USERNAME=
- WEBUI_PASSWORD=
- QBITTORRENT_WEBUI_USERNAME=
- QBITTORRENT_WEBUI_PASSWORD=
User avatar
Peter
Administrator
Administrator
Posts: 3044
Joined: Wed Jul 07, 2010 6:14 pm

Re: WebUI, login credentials

Post by Peter »

- Could you clarify what do you mean by "go around"?
- Also, each Docker qBittorrent "distribution" is different, there is no official version. So each will differ in behavior.
Arelius
Newbie
Newbie
Posts: 6
Joined: Tue Apr 09, 2024 11:18 am

Re: WebUI, login credentials

Post by Arelius »

Peter wrote: Wed Apr 10, 2024 10:02 am - Could you clarify what do you mean by "go around"?
- Also, each Docker qBittorrent "distribution" is different, there is no official version. So each will differ in behavior.
I don't want to get asked for user/pass is what I mean.

I have not seen any builds with these commands (not that I remember at least) so I tried adding them to Docker compose but none of them worked so I though maybe it's just not possible(?).

Is there any build out there that supports such behavior?
User avatar
Peter
Administrator
Administrator
Posts: 3044
Joined: Wed Jul 07, 2010 6:14 pm

Re: WebUI, login credentials

Post by Peter »

It would be a BIG security flaw.

Simply go into settings and you can enable whitelist. Like you can whitelist an IP for example. If it's on the internet and you don't have a static IP, you can always set up SSH port forward and then use the local IP (like 127.0.0.1) as whitelist.
Arelius
Newbie
Newbie
Posts: 6
Joined: Tue Apr 09, 2024 11:18 am

Re: WebUI, login credentials

Post by Arelius »

Peter wrote: Wed Apr 10, 2024 1:56 pm It would be a BIG security flaw.

Simply go into settings and you can enable whitelist. Like you can whitelist an IP for example. If it's on the internet and you don't have a static IP, you can always set up SSH port forward and then use the local IP (like 127.0.0.1) as whitelist.
Under which tab can I find that setting? Maybe I'm blind :o
ticedoff8
Member
Member
Posts: 21
Joined: Sat Jul 20, 2024 1:16 am

Re: WebUI, login credentials

Post by ticedoff8 »

After you log into the Web UI, click on Tools > Options > Web UI
On that tab, the 2nd group is labeled "Authentication".
In that group, there is a tic-box for "Bypass authentication for clients in the whitelisted IP subnets" - check that box and add your local subnet using the example already ghosted in the list box (EG: 172.17.32.0/24).
Save it.

You can add multiple subnets and they are comma-separated
Post Reply