From 070b75b6be72bf127d14f2a8c719e8600cef4a81 Mon Sep 17 00:00:00 2001
From: Marek Maslowski <marek1.maslowski@gmail.com>
Date: Sun, 5 Apr 2026 14:26:28 +0200
Subject: [PATCH] fixing loging in to synology

---
 server/src/services/memories/synologyService.ts | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/server/src/services/memories/synologyService.ts b/server/src/services/memories/synologyService.ts
index b02944d..ff44179 100644
--- a/server/src/services/memories/synologyService.ts
+++ b/server/src/services/memories/synologyService.ts
@@ -120,9 +120,9 @@ function _getSynologyCredentials(userId: number): ServiceResult<SynologyCredenti
 }
 
 
-function _buildSynologyEndpoint(url: string): string {
+function _buildSynologyEndpoint(url: string, params: string): string {
     const normalized = url.replace(/\/$/, '').match(/^https?:\/\//) ? url.replace(/\/$/, '') : `https://${url.replace(/\/$/, '')}`;
-    return `${normalized}${SYNOLOGY_ENDPOINT_PATH}`;
+    return `${normalized}${SYNOLOGY_ENDPOINT_PATH}?${params}`;
 }
 
 function _buildSynologyFormBody(params: ApiCallParams): URLSearchParams {
@@ -135,7 +135,7 @@ function _buildSynologyFormBody(params: ApiCallParams): URLSearchParams {
 }
 
 async function _fetchSynologyJson<T>(url: string, body: URLSearchParams): Promise<ServiceResult<T>> {
-    const endpoint = _buildSynologyEndpoint(url);
+    const endpoint = _buildSynologyEndpoint(url, `api=${body.get('api')}`);
     const SsrfResult = await checkSsrf(endpoint);
     if (!SsrfResult.allowed) {
         return fail(SsrfResult.error, 400);
@@ -497,8 +497,7 @@ export async function streamSynologyAsset(
             _sid: sid.data,
         });
 
-    const url = `${_buildSynologyEndpoint(synology_credentials.data.synology_url)}?${params.toString()}`;
-
+    const url = _buildSynologyEndpoint(synology_credentials.data.synology_url, params.toString());
     await pipeAsset(url, response)
 }