also enforce onboarding if addon user accesses the webserver directly

diff --git a/music_assistant/controllers/webserver/controller.py b/music_assistant/controllers/webserver/controller.py
index f502520b1938dde19a84817b0f5d082f053615d6..1d83170913b6e6eae8b9cce8c920578a5cd189ee 100644 (file)
--- a/music_assistant/controllers/webserver/controller.py
+++ b/music_assistant/controllers/webserver/controller.py
@@ -603,7 +603,9 @@ class WebserverController(CoreController):
     async def _handle_index(self, request: web.Request) -> web.StreamResponse:
         """Handle request for index page with onboarding check."""
         # If not yet onboarded, redirect to setup
-        if not self.mass.config.onboard_done:
+        if not self.mass.config.onboard_done or (
+            not self.auth.has_users() and not is_request_from_ingress(request)
+        ):
             # Preserve return_url parameter if present (will be passed back after setup)
             return_url = request.query.get("return_url")
             if return_url: