From 1cc0f902b0067f0d0950e22790aeb757e5f95198 Mon Sep 17 00:00:00 2001
From: Florian <52180080+florianjs@users.noreply.github.com>
Date: Thu, 8 Jan 2026 14:20:55 +0100
Subject: [PATCH] Minor script improvement

---
 package.json                     |  2 +-
 scripts/install.sh               | 10 +++++-----
 server/api/torznab/utils/auth.ts |  6 +++++-
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/package.json b/package.json
index 09e7361..6979b89 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "trackarr",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "type": "module",
   "private": true,
   "scripts": {
diff --git a/scripts/install.sh b/scripts/install.sh
index 7fa2b92..3c05bbd 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -558,16 +558,16 @@ run_migrations() {
 
     # Check/Rename database
     log_info "Verifying database name..."
-    if docker compose -f docker-compose.prod.yml exec -T postgres psql -U "$DB_USER" -d postgres -lqt | cut -d \| -f 1 | grep -qw "$DB_NAME"; then
+    if docker compose -f docker-compose.prod.yml exec -T -e PGPASSWORD="$DB_PASSWORD" postgres psql -U "$DB_USER" -d postgres -lqt | cut -d \| -f 1 | grep -qw "$DB_NAME"; then
         log_success "Database '$DB_NAME' exists"
-    elif docker compose -f docker-compose.prod.yml exec -T postgres psql -U "$DB_USER" -d postgres -lqt | cut -d \| -f 1 | grep -qw "opentracker"; then
+    elif docker compose -f docker-compose.prod.yml exec -T -e PGPASSWORD="$DB_PASSWORD" postgres psql -U "$DB_USER" -d postgres -lqt | cut -d \| -f 1 | grep -qw "opentracker"; then
         log_warn "Found legacy database 'opentracker'. Renaming to '$DB_NAME'..."
-        docker compose -f docker-compose.prod.yml exec -T postgres psql -U "$DB_USER" -d postgres -c "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = 'opentracker';" > /dev/null 2>&1 || true
-        docker compose -f docker-compose.prod.yml exec -T postgres psql -U "$DB_USER" -d postgres -c "ALTER DATABASE opentracker RENAME TO \"$DB_NAME\";"
+        docker compose -f docker-compose.prod.yml exec -T -e PGPASSWORD="$DB_PASSWORD" postgres psql -U "$DB_USER" -d postgres -c "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = 'opentracker';" > /dev/null 2>&1 || true
+        docker compose -f docker-compose.prod.yml exec -T -e PGPASSWORD="$DB_PASSWORD" postgres psql -U "$DB_USER" -d postgres -c "ALTER DATABASE opentracker RENAME TO \"$DB_NAME\";"
         log_success "Database renamed successfully"
     else
         log_warn "Database '$DB_NAME' not found. Creating..."
-        docker compose -f docker-compose.prod.yml exec -T postgres psql -U "$DB_USER" -d postgres -c "CREATE DATABASE \"$DB_NAME\" OWNER \"$DB_USER\";"
+        docker compose -f docker-compose.prod.yml exec -T -e PGPASSWORD="$DB_PASSWORD" postgres psql -U "$DB_USER" -d postgres -c "CREATE DATABASE \"$DB_NAME\" OWNER \"$DB_USER\";"
         log_success "Database created"
     fi
     
diff --git a/server/api/torznab/utils/auth.ts b/server/api/torznab/utils/auth.ts
index bf09f60..b03a6a5 100644
--- a/server/api/torznab/utils/auth.ts
+++ b/server/api/torznab/utils/auth.ts
@@ -37,7 +37,11 @@ export async function authenticateTorznab(
 
   // Validate passkey format (40 hex chars)
   if (!/^[a-f0-9]{40}$/i.test(apikey)) {
-    throw createTorznabError(event, TORZNAB_ERRORS.INCORRECT_CREDENTIALS);
+    throw createTorznabError(
+      event,
+      TORZNAB_ERRORS.INCORRECT_CREDENTIALS,
+      `Invalid API key format. Expected 40 hex characters (your passkey), got ${apikey.length} characters`
+    );
   }
 
   // Look up user by passkey