Timmy Welch
34d35b3b53
Only send Authorization header to profile url if it is the OIDC Issuer
2026-11-01 21:09:46 -08:00
Timmy Welch
0257f2e8f5
Validate the sub claim before merging UserInfo
2026-11-01 21:09:46 -08:00
Timmy Welch
b6e018b42e
Use ConcurrentDictionary to make StateManager thread-safe
2026-11-01 21:09:46 -08:00
Timmy Welch
527cc18129
Try to guard against some possible Null References
2026-11-01 21:09:46 -08:00
Timmy Welch
c4eb553c83
Rename SSOController.cs to OIDCController.cs
2026-11-01 20:25:16 -08:00
Timmy Welch
f8a50e9160
Guard against race when starting OIDCPlugin
2026-11-01 20:25:16 -08:00
Timmy Welch
d9f65f79b0
Set Anti-framing headers for all endpoints
2026-11-01 20:24:25 -08:00
Timmy Welch
b6e67ddaf8
Fix url joining
2026-10-14 15:31:15 -07:00
Timmy Welch
3073675426
Add more logging
2026-09-18 10:35:59 -07:00
Timmy Welch
9ad19ef351
Fix config merging
2026-09-18 02:09:26 -07:00
Timmy Welch
8c2bb5e970
Simplify config merging
2026-09-08 23:33:41 -07:00
Timmy Welch
ea181a5016
Update to jellyfin 12
2026-09-08 03:02:11 -07:00
Timmy Welch
b20d993f33
Updates
...
Use a consistent http and oidc clients
Use the access token to send an a authenticated request to retrieve avatar and do it at the same time as requesting the userinfo endpoint
Merge JTokens instead of re-parsing json strings to merge configuration
2026-08-22 16:59:28 -07:00
Timmy Welch
2c73bab61b
Rename to OIDC-Auth
2026-08-18 18:30:47 -07:00
Timmy Welch