Stremio addons need to be publicaly accessible in order to work with Stremio, which doesn't (yet) support any form of addon auth. We secure the "/configure" page of our addons behind SSO, intending that only authorized users to be able to (easily) configure and install them in Stremio.
A misconfiguration ("/configure/" was protected, but not "/configure") inadvertently allowed more public access than intended, and users may have unknowingly become comfortable accessing, configuring, and sharing their addons entirely without SSO. Proxy Streaming addons (Comet, MediaFusion, StremThru) already protect their streaming functions with extra authentication, but we think it's reasonable for a user to expect as much privacy as possible for their private addons!
In our next glow-up, we're fixing this misconfiguration, so that once again, you'll need to be authorized with your ElfHosted account in order to configure your ElfHosted Stremio addons, just like you do to access your dashboard, FileBrowser, and other SSO-protected apps. Once an addon is installed in Stremio, SSO doesn't apply, and there's nothing to change.
What do I need to do?
Nothing. Keep using Stremio as before. If / when you want to reconfigure your addons, you'll be prompted to sign into your ElfHosted account first. Anybody else trying to use your addons will have to do the same.
What if I share my addons?
If you share your addons with a few friends / family, you can send them the manifest URL (the URL you get when you click "install" in the addon), and they can paste this directly into Stremio, to perform an installation. Note that this URL will include your debrid API key, so only do this with people you trust.
What if I don't want SSO?
With an expectation that this might be an unwelcome complication for some users who are comfortable with "the way things were", we've prepared "Exposed" products which will allow users to opt out of any SSO on their addons again.
Normally priced at $1/month, these exposed subscriptions are available free with coupon code "EXPOSEMYADDONS" until the end of January 2025, and come with increased scrutiny / concurrency limits, to avoid abuse: