quasarr 1.32.0__py3-none-any.whl → 2.1.0__py3-none-any.whl

quasarr/providers/shared_state.py

@@ -7,6 +7,7 @@ import os
 import re
 import time
 import traceback
+import unicodedata
 from datetime import datetime, timedelta, date
 from urllib import parse
 
@@ -826,6 +827,8 @@ def get_recently_searched(shared_state, context, timeout_seconds):
 
 
 def download_package(links, title, password, package_id):
+    links = [sanitize_url(link) for link in links]
+
     device = get_device()
     downloaded = device.linkgrabber.add_links(params=[
         {
@@ -841,3 +844,24 @@ def download_package(links, title, password, package_id):
         }
     ])
     return downloaded
+
+
+def sanitize_url(url: str) -> str:
+    # normalize first
+    url = unicodedata.normalize("NFKC", url)
+
+    # 1) real control characters (U+0000–U+001F, U+007F–U+009F)
+    _REAL_CTRL_RE = re.compile(r'[\u0000-\u001f\u007f-\u009f]')
+
+    # 2) *literal* escaped unicode junk: \u0010, \x10, repeated variants
+    _ESCAPED_CTRL_RE = re.compile(
+        r'(?:\\u00[0-1][0-9a-fA-F]|\\x[0-1][0-9a-fA-F])'
+    )
+
+    # remove literal escaped control sequences like "\u0010"
+    url = _ESCAPED_CTRL_RE.sub("", url)
+
+    # remove actual control characters if already decoded
+    url = _REAL_CTRL_RE.sub("", url)
+
+    return url.strip()

quasarr/providers/version.py

@@ -8,7 +8,7 @@ import requests
 
 
 def get_version():
-    return "1.32.0"
+    return "2.1.0"
 
 
 def get_latest_version():

quasarr/search/sources/al.py

@@ -208,7 +208,7 @@ def al_feed(shared_state, start_time, request_from, mirror=None):
 
                 # Build payload using final_title
                 mb = 0  # size not available in feed
-                raw = f"{final_title}|{url}|{mirror}|{mb}|{release_id}|".encode("utf-8")
+                raw = f"{final_title}|{url}|{mirror}|{mb}|{release_id}||{hostname}".encode("utf-8")
                 payload = urlsafe_b64encode(raw).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/by.py

@@ -124,7 +124,7 @@ def _parse_posts(soup, shared_state, base_url, password, mirror_filter,
                 imdb_id = None
 
             payload = urlsafe_b64encode(
-                f"{title}|{source}|{mirror_filter}|{mb}|{password}|{imdb_id}".encode()
+                f"{title}|{source}|{mirror_filter}|{mb}|{password}|{imdb_id}|{hostname}".encode()
             ).decode()
             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/dd.py

@@ -106,7 +106,8 @@ def dd_search(shared_state, start_time, request_from, search_string="", mirror=N
                     mb = shared_state.convert_to_mb(size_item) * 1024 * 1024
                     published = convert_to_rss_date(release.get("when"))
                     payload = urlsafe_b64encode(
-                        f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode("utf-8")
+                        f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode(
+                        "utf-8")
                     link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
                     releases.append({

quasarr/search/sources/dj.py

@@ -68,7 +68,7 @@ def dj_feed(shared_state, start_time, request_from, mirror=None):
             imdb_id = None
 
             payload = urlsafe_b64encode(
-                f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")
+                f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")
             ).decode("utf-8")
 
             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
@@ -186,7 +186,7 @@ def dj_search(shared_state, start_time, request_from, search_string, mirror=None
                     size = 0
 
                     payload = urlsafe_b64encode(
-                        f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")
+                        f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")
                     ).decode("utf-8")
 
                     link = f"{shared_state.values['internal_address']}/download/?payload={payload}"

quasarr/search/sources/dl.py

@@ -97,7 +97,7 @@ def dl_feed(shared_state, start_time, request_from, mirror=None):
                 if not title_elem:
                     continue
 
-                title = title_elem.get_text(strip=True)
+                title = ''.join(title_elem.strings)
                 if not title:
                     continue
 
@@ -123,7 +123,7 @@ def dl_feed(shared_state, start_time, request_from, mirror=None):
                 password = ""
 
                 payload = urlsafe_b64encode(
-                    f"{title}|{thread_url}|{mirror}|{mb}|{password}|{imdb_id or ''}".encode("utf-8")
+                    f"{title}|{thread_url}|{mirror}|{mb}|{password}|{imdb_id or ''}|{hostname}".encode("utf-8")
                 ).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
@@ -230,7 +230,13 @@ def _search_single_page(shared_state, host, search_string, search_id, page_num,
                 if not title_elem:
                     continue
 
-                title = title_elem.get_text(separator=' ', strip=True)
+                # Skip "Wird gesucht" threads
+                label = item.select_one('.contentRow-minor .label')
+                if label and 'wird gesucht' in label.get_text(strip=True).lower():
+                    continue
+
+                title = ''.join(title_elem.strings)
+
                 title = re.sub(r'\s+', ' ', title)
                 title = unescape(title)
                 title_normalized = normalize_title_for_sonarr(title)
@@ -260,7 +266,8 @@ def _search_single_page(shared_state, host, search_string, search_id, page_num,
                 password = ""
 
                 payload = urlsafe_b64encode(
-                    f"{title_normalized}|{thread_url}|{mirror}|{mb}|{password}|{imdb_id or ''}".encode("utf-8")
+                    f"{title_normalized}|{thread_url}|{mirror}|{mb}|{password}|{imdb_id or ''}|{hostname}".encode(
+                        "utf-8")
                 ).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/dt.py

@@ -111,7 +111,7 @@ def dt_feed(shared_state, start_time, request_from, mirror=None):
                 published = parse_published_datetime(article)
 
                 payload = urlsafe_b64encode(
-                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")
+                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")
                 ).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/dw.py

@@ -98,7 +98,7 @@ def dw_feed(shared_state, start_time, request_from, mirror=None):
                 date = article.parent.parent.find("span", {"class": "date updated"}).text.strip()
                 published = convert_to_rss_date(date)
                 payload = urlsafe_b64encode(
-                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode("utf-8")
+                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
             except Exception as e:
                 info(f"Error parsing {hostname.upper()} feed: {e}")
@@ -136,7 +136,6 @@ def dw_search(shared_state, start_time, request_from, search_string, mirror=None
         debug(f'Skipping {request_from} search on "{hostname.upper()}" (unsupported media type)!')
         return releases
 
-
     if "Radarr" in request_from:
         search_type = "videocategory=filme"
     else:
@@ -168,10 +167,10 @@ def dw_search(shared_state, start_time, request_from, search_string, mirror=None
                 title = result.a.text.strip()
 
                 if not shared_state.is_valid_release(title,
-                                                                     request_from,
-                                                                     search_string,
-                                                                     season,
-                                                                     episode):
+                                                     request_from,
+                                                     search_string,
+                                                     season,
+                                                     episode):
                     continue
 
                 if not imdb_id:
@@ -188,7 +187,7 @@ def dw_search(shared_state, start_time, request_from, search_string, mirror=None
                 date = result.parent.parent.find("span", {"class": "date updated"}).text.strip()
                 published = convert_to_rss_date(date)
                 payload = urlsafe_b64encode(
-                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode("utf-8")
+                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
             except Exception as e:
                 info(f"Error parsing {hostname.upper()} search: {e}")

quasarr/search/sources/fx.py

@@ -34,7 +34,6 @@ def fx_feed(shared_state, start_time, request_from, mirror=None):
         debug(f'Skipping {request_from} search on "{hostname.upper()}" (unsupported media type)!')
         return releases
 
-
     if mirror and mirror not in supported_mirrors:
         debug(f'Mirror "{mirror}" not supported by "{hostname.upper()}". Supported mirrors: {supported_mirrors}.'
               ' Skipping search!')
@@ -81,7 +80,8 @@ def fx_feed(shared_state, start_time, request_from, mirror=None):
                         mb = shared_state.convert_to_mb(size_item)
                         size = mb * 1024 * 1024
                         payload = urlsafe_b64encode(
-                            f"{title}|{link}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode("utf-8")
+                            f"{title}|{link}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode(
+                            "utf-8")
                         link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
                     except:
                         continue
@@ -125,7 +125,6 @@ def fx_search(shared_state, start_time, request_from, search_string, mirror=None
         debug(f'Skipping {request_from} search on "{hostname.upper()}" (unsupported media type)!')
         return releases
 
-
     if mirror and mirror not in supported_mirrors:
         debug(f'Mirror "{mirror}" not supported by "{hostname.upper()}". Supported mirrors: {supported_mirrors}.'
               ' Skipping search!')
@@ -188,7 +187,8 @@ def fx_search(shared_state, start_time, request_from, search_string, mirror=None
                             mb = shared_state.convert_to_mb(size_item)
                             size = mb * 1024 * 1024
                             payload = urlsafe_b64encode(
-                                f"{title}|{link}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode("utf-8")
+                                f"{title}|{link}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode(
+                                "utf-8")
                             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
                         except:
                             continue

quasarr/search/sources/he.py

@@ -177,7 +177,7 @@ def he_search(shared_state, start_time, request_from, search_string="", mirror=N
 
             password = None
             payload = urlsafe_b64encode(
-                f"{title}|{source}|{mirror}|{mb}|{password}|{release_imdb_id}".encode("utf-8")).decode()
+                f"{title}|{source}|{mirror}|{mb}|{password}|{release_imdb_id}|{hostname}".encode("utf-8")).decode()
             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
             releases.append({

quasarr/search/sources/mb.py

@@ -116,7 +116,7 @@ def _parse_posts(soup, shared_state, password, mirror_filter,
                 size_bytes = mb * 1024 * 1024
 
             payload = urlsafe_b64encode(
-                f"{title}|{source}|{mirror_filter}|{mb}|{password}|{imdb_id}".encode()
+                f"{title}|{source}|{mirror_filter}|{mb}|{password}|{imdb_id}|{hostname}".encode()
             ).decode()
             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/nk.py

@@ -168,7 +168,7 @@ def nk_search(shared_state, start_time, request_from, search_string="", mirror=N
             published = convert_to_rss_date(date_text) if date_text else ""
 
             payload = urlsafe_b64encode(
-                f"{title}|{source}|{mirror}|{mb}|{password}|{release_imdb_id}".encode("utf-8")).decode()
+                f"{title}|{source}|{mirror}|{mb}|{password}|{release_imdb_id}|{hostname}".encode("utf-8")).decode()
             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
             releases.append({

quasarr/search/sources/nx.py

@@ -59,7 +59,7 @@ def nx_feed(shared_state, start_time, request_from, mirror=None):
                     imdb_id = item.get('_media', {}).get('imdbid', None)
                     mb = shared_state.convert_to_mb(item)
                     payload = urlsafe_b64encode(
-                        f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode(
+                        f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode(
                         "utf-8")
                     link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
                 except:

quasarr/search/sources/sf.py

@@ -142,7 +142,8 @@ def sf_feed(shared_state, start_time, request_from, mirror=None):
                         imdb_id = None  # imdb info is missing here
 
                         payload = urlsafe_b64encode(
-                            f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")).decode("utf-8")
+                            f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")).decode(
+                            "utf-8")
                         link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
                     except:
                         continue
@@ -349,7 +350,8 @@ def sf_search(shared_state, start_time, request_from, search_string, mirror=None
                                                      episode):
                     continue
 
-                payload = urlsafe_b64encode(f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode()).decode()
+                payload = urlsafe_b64encode(
+                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode()).decode()
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
                 size_bytes = mb * 1024 * 1024
 

quasarr/search/sources/sj.py

@@ -68,7 +68,7 @@ def sj_feed(shared_state, start_time, request_from, mirror=None):
             imdb_id = None
 
             payload = urlsafe_b64encode(
-                f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")
+                f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")
             ).decode("utf-8")
 
             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
@@ -186,7 +186,7 @@ def sj_search(shared_state, start_time, request_from, search_string, mirror=None
                     size = 0
 
                     payload = urlsafe_b64encode(
-                        f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")
+                        f"{title}|{series_url}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")
                     ).decode("utf-8")
 
                     link = f"{shared_state.values['internal_address']}/download/?payload={payload}"

quasarr/search/sources/sl.py

@@ -6,9 +6,9 @@ import datetime
 import html
 import re
 import time
-from concurrent.futures import ThreadPoolExecutor, as_completed
 import xml.etree.ElementTree as ET
 from base64 import urlsafe_b64encode
+from concurrent.futures import ThreadPoolExecutor, as_completed
 from urllib.parse import quote_plus
 
 import requests
@@ -90,7 +90,7 @@ def sl_feed(shared_state, start_time, request_from, mirror=None):
                 imdb_id = m.group(1) if m else None
 
                 payload = urlsafe_b64encode(
-                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}".encode("utf-8")
+                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id}|{hostname}".encode("utf-8")
                 ).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
@@ -214,7 +214,7 @@ def sl_search(shared_state, start_time, request_from, search_string, mirror=None
                         imdb_id = None
 
                         payload = urlsafe_b64encode(
-                            f"{title}|{source}|{mirror}|0|{password}|{imdb_id}".encode('utf-8')
+                            f"{title}|{source}|{mirror}|0|{password}|{imdb_id}|{hostname}".encode('utf-8')
                         ).decode('utf-8')
                         link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/wd.py

@@ -128,7 +128,7 @@ def _parse_rows(
             published = convert_to_rss_date(date_txt) if date_txt else one_hour_ago
 
             payload = urlsafe_b64encode(
-                f"{title}|{source}|{mirror_filter}|{mb}|{password}|{imdb_id}".encode()
+                f"{title}|{source}|{mirror_filter}|{mb}|{password}|{imdb_id}|{hostname}".encode()
             ).decode()
             download_link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 

quasarr/search/sources/wx.py

@@ -96,7 +96,7 @@ def wx_feed(shared_state, start_time, request_from, mirror=None):
                 password = host.upper()
 
                 payload = urlsafe_b64encode(
-                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id or ''}".encode("utf-8")
+                    f"{title}|{source}|{mirror}|{mb}|{password}|{imdb_id or ''}|{hostname}".encode("utf-8")
                 ).decode("utf-8")
                 link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
@@ -253,7 +253,8 @@ def wx_search(shared_state, start_time, request_from, search_string, mirror=None
                             password = f"www.{host}"
 
                             payload = urlsafe_b64encode(
-                                f"{title}|{source}|{mirror}|0|{password}|{item_imdb_id or ''}".encode("utf-8")
+                                f"{title}|{source}|{mirror}|0|{password}|{item_imdb_id or ''}|{hostname}".encode(
+                                    "utf-8")
                             ).decode("utf-8")
                             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"
 
@@ -309,7 +310,7 @@ def wx_search(shared_state, start_time, request_from, search_string, mirror=None
                             password = f"www.{host}"
 
                             payload = urlsafe_b64encode(
-                                f"{release_title}|{release_source}|{mirror}|{release_size}|{password}|{item_imdb_id or ''}".encode(
+                                f"{release_title}|{release_source}|{mirror}|{release_size}|{password}|{item_imdb_id or ''}|{hostname}".encode(
                                     "utf-8")
                             ).decode("utf-8")
                             link = f"{shared_state.values['internal_address']}/download/?payload={payload}"

quasarr/storage/setup.py

@@ -15,6 +15,7 @@ import quasarr.providers.sessions.al
 import quasarr.providers.sessions.dd
 import quasarr.providers.sessions.dl
 import quasarr.providers.sessions.nx
+from quasarr.providers.auth import add_auth_routes, add_auth_hook
 from quasarr.providers.html_templates import render_button, render_form, render_success, render_fail, \
     render_centered_html
 from quasarr.providers.log import info
@@ -91,9 +92,16 @@ def add_no_cache_headers(app):
         response.set_header('Expires', '0')
 
 
+def setup_auth(app):
+    """Add authentication to setup app if enabled."""
+    add_auth_routes(app)
+    add_auth_hook(app)
+
+
 def path_config(shared_state):
     app = Bottle()
     add_no_cache_headers(app)
+    setup_auth(app)
 
     current_path = os.path.dirname(os.path.abspath(sys.argv[0]))
 
@@ -560,6 +568,7 @@ def save_hostnames(shared_state, timeout=5, first_run=True):
 def hostnames_config(shared_state):
     app = Bottle()
     add_no_cache_headers(app)
+    setup_auth(app)
 
     @app.get('/')
     def hostname_form():
@@ -638,6 +647,7 @@ def hostnames_config(shared_state):
 def hostname_credentials_config(shared_state, shorthand, domain):
     app = Bottle()
     add_no_cache_headers(app)
+    setup_auth(app)
 
     shorthand = shorthand.upper()
 
@@ -793,6 +803,7 @@ def hostname_credentials_config(shared_state, shorthand, domain):
 def flaresolverr_config(shared_state):
     app = Bottle()
     add_no_cache_headers(app)
+    setup_auth(app)
 
     @app.get('/')
     def url_form():
@@ -933,6 +944,7 @@ def flaresolverr_config(shared_state):
 def jdownloader_config(shared_state):
     app = Bottle()
     add_no_cache_headers(app)
+    setup_auth(app)
 
     @app.get('/')
     def jd_form():

{quasarr-1.32.0.dist-info → quasarr-2.1.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: quasarr
-Version: 1.32.0
+Version: 2.1.0
 Summary: Quasarr connects JDownloader with Radarr, Sonarr and LazyLibrarian. It also decrypts links protected by CAPTCHAs.
 Home-page: https://github.com/rix1337/Quasarr
 Author: rix1337
@@ -25,7 +25,7 @@ Dynamic: license-file
 Dynamic: requires-dist
 Dynamic: summary
 
-#   
+#    
 
 <img src="https://raw.githubusercontent.com/rix1337/Quasarr/main/Quasarr.png" data-canonical-src="https://raw.githubusercontent.com/rix1337/Quasarr/main/Quasarr.png" width="64" height="64" />
 
@@ -41,7 +41,8 @@ indexers. It simply does not know what NZB files are.
 Quasarr includes a solution to quickly and easily decrypt protected links.
 [Active monthly Sponsors get access to SponsorsHelper to do so automatically.](https://github.com/rix1337/Quasarr?tab=readme-ov-file#sponsorshelper)
 Alternatively, follow the link from the console output (or discord notification) to solve CAPTCHAs manually.
-Quasarr will confidently handle the rest. Some CAPTCHA types require [Tampermonkey](https://www.tampermonkey.net/) to be installed in your browser.
+Quasarr will confidently handle the rest. Some CAPTCHA types require [Tampermonkey](https://www.tampermonkey.net/) to be
+installed in your browser.
 
 # Instructions
 
@@ -56,9 +57,11 @@ Quasarr will confidently handle the rest. Some CAPTCHA types require [Tampermonk
 
 ## FlareSolverr (Optional)
 
-FlareSolverr is **optional** but **required for some sites** (e.g., AL) that use Cloudflare protection. You can skip FlareSolverr during setup and configure it later via the web UI.
+FlareSolverr is **optional** but **required for some sites** (e.g., AL) that use Cloudflare protection. You can skip
+FlareSolverr during setup and configure it later via the web UI.
 
 If using FlareSolverr, provide your URL including the version path:
+
 ```
 http://192.168.1.1:8191/v1
 ```
@@ -69,18 +72,26 @@ http://192.168.1.1:8191/v1
 
 ## Quasarr
 
-> ⚠️ Quasarr requires at least one valid hostname to start. It does not provide or endorse any specific sources, but community-maintained lists are available:
+> ⚠️ Quasarr requires at least one valid hostname to start. It does not provide or endorse any specific sources, but
+> community-maintained lists are available:
 
 🔗 **[https://quasarr-host.name](https://quasarr-host.name)** — community guide for finding hostnames
 
-📋 Alternatively, browse community suggestions via [pastebin search](https://pastebin.com/search?q=hostnames+quasarr) (login required).
+📋 Alternatively, browse community suggestions via [pastebin search](https://pastebin.com/search?q=hostnames+quasarr) (
+login required).
+
+> Authentication is optional but strongly recommended.
+>
+> - 🔐 Set `USER` and `PASS` to enable form-based login (30-day session)
+> - 🔑 Set `AUTH=basic` to use HTTP Basic Authentication instead
 
 ---
 
 ## JDownloader
 
-> ⚠️ If using Docker: 
-> JDownloader's download path must be available to Radarr/Sonarr/LazyLibrarian with **identical internal and external path mappings**!
+> ⚠️ If using Docker:
+> JDownloader's download path must be available to Radarr/Sonarr/LazyLibrarian with **identical internal and external
+path mappings**!
 > Matching only the external path is not sufficient.
 
 1. Start and connect JDownloader to [My JDownloader](https://my.jdownloader.org)
@@ -89,7 +100,8 @@ http://192.168.1.1:8191/v1
 <details>
 <summary>Fresh install recommended</summary>
 
-Consider setting up a fresh JDownloader instance. Quasarr will modify JDownloader's settings to enable Radarr/Sonarr/LazyLibrarian integration.
+Consider setting up a fresh JDownloader instance. Quasarr will modify JDownloader's settings to enable
+Radarr/Sonarr/LazyLibrarian integration.
 
 </details>
 
@@ -97,7 +109,8 @@ Consider setting up a fresh JDownloader instance. Quasarr will modify JDownloade
 
 ## Radarr / Sonarr
 
-> ⚠️ **Sonarr users:** Set all shows (including anime) to the **Standard** series type. Quasarr cannot find releases for shows set to Anime/Absolute.
+> ⚠️ **Sonarr users:** Set all shows (including anime) to the **Standard** series type. Quasarr cannot find releases for
+> shows set to Anime/Absolute.
 
 
 Add Quasarr as both a **Newznab Indexer** and **SABnzbd Download Client** using your Quasarr URL and API Key.
@@ -113,9 +126,11 @@ Add Quasarr as both a **Newznab Indexer** and **SABnzbd Download Client** using
 <summary>Restrict results to a specific mirror</summary>
 
 Append the mirror name to your Newznab URL:
+
 ```
 /api/dropbox/
 ```
+
 Only releases with `dropbox` in a link will be returned. If the mirror isn't available, the release will fail.
 
 </details>
@@ -131,27 +146,29 @@ Only releases with `dropbox` in a link will be returned. If the mirror isn't ava
 
 ### SABnzbd+ Downloader
 
-| Setting | Value |
-|---------|-------|
+| Setting  | Value                      |
+|----------|----------------------------|
 | URL/Port | Your Quasarr host and port |
-| API Key | Your Quasarr API Key |
-| Category | `docs` |
+| API Key  | Your Quasarr API Key       |
+| Category | `docs`                     |
 
 ### Newznab Provider
 
-| Setting | Value |
-|---------|-------|
-| URL | Your Quasarr URL |
-| API | Your Quasarr API Key |
+| Setting | Value                |
+|---------|----------------------|
+| URL     | Your Quasarr URL     |
+| API     | Your Quasarr API Key |
 
 ### Fix Import & Processing
 
 **Importing:**
+
 - Enable `OpenLibrary api for book/author information`
 - Set Primary Information Source to `OpenLibrary`
 - Add to Import languages: `, Unknown` (German users: `, de, ger, de-DE`)
 
 **Processing → Folders:**
+
 - Add your Quasarr download path (typically `/downloads/Quasarr/`)
 
 </details>
@@ -170,7 +187,10 @@ docker run -d \
   -e 'INTERNAL_ADDRESS'='http://192.168.0.1:8080' \
   -e 'EXTERNAL_ADDRESS'='https://foo.bar/' \
   -e 'DISCORD'='https://discord.com/api/webhooks/1234567890/ABCDEFGHIJKLMN' \
-  -e 'HOSTNAMES'='https://quasarr-host.name/ini?token=123...'
+  -e 'HOSTNAMES'='https://quasarr-host.name/ini?token=123...' \
+  -e 'USER'='admin' \
+  -e 'PASS'='change-me' \
+  -e 'AUTH'='form' \
   -e 'SILENT'='True' \
   -e 'DEBUG'='' \
   -e 'TZ'='Europe/Berlin' \
@@ -184,6 +204,8 @@ docker run -d \
     * Must be a publicly available `HTTP` or `HTTPs` link
     * Must be a raw `.ini` / text file (not HTML or JSON)
     * Must contain at least one valid Hostname per line `ab = xyz`
+* `USER` / `PASS` are credentials to protect the web UI
+* `AUTH` is the authentication mode (`form` or `basic`)
 * `SILENT` is optional and silences all discord notifications except for error messages from SponsorsHelper if `True`.
 * `DEBUG` is optional and enables debug logging if `True`.
 * `TZ` is optional, wrong timezone can cause HTTPS/SSL issues
@@ -226,7 +248,8 @@ Most feature requests can be satisfied by:
 - There are no hostname integrations in active development unless you see an open pull request
   [here](https://github.com/rix1337/Quasarr/pulls).
 - **Pull requests are welcome!** Especially for popular hostnames.
-    - A short guide to set up required dev services is found in [/docker/dev-setup.md](https://github.com/rix1337/Quasarr/blob/main/docker/dev-setup.md)
+    - A short guide to set up required dev services is found
+      in [/docker/dev-setup.md](https://github.com/rix1337/Quasarr/blob/main/docker/dev-setup.md)
     - Always reach out on Discord before starting work on a new feature to prevent waste of time.
     - Please follow the existing code style and project structure.
     - Anti-bot measures must be circumvented fully by Quasarr. Thus, you will need to provide a working solution for new
@@ -248,11 +271,11 @@ Image access is limited to [active monthly GitHub sponsors](https://github.com/u
 
 1. Start your [sponsorship](https://github.com/users/rix1337/sponsorship) first.
 2. Open [GitHub Classic Token Settings](https://github.com/settings/tokens/new?type=classic)
-3. Name it (e.g., `SponsorsHelper`) and choose unlimited expiration  
+3. Name it (e.g., `SponsorsHelper`) and choose unlimited expiration
 4. Enable these scopes:
-   - `read:packages`
-   - `read:user`
-   - `read:org`
+    - `read:packages`
+    - `read:user`
+    - `read:org`
 5. Click **Generate token** and copy it for the next steps
 
 ---