-
v6.0.0.6 Stable
released this
2026-11-01 21:18:19 -08:00 | 0 commits to main since this releaseRepository URL: https://gitea.narnian.us/api/packages/lordwelch/generic/jellyfin-plugin-oidc/latest/manifest.json
Bugfixes
- Fix postmessage filtering
- Fix url construction in OIDC-Auth-auth.html
- Guard against race when starting OIDCPlugin
- Only send Authorization header to profile url if it is the OIDC Issuer
- Rename SSOController.cs to OIDCController.cs
- Set Anti-framing headers for all endpoints
- Try to guard against some possible Null References
- Use ConcurrentDictionary to make StateManager thread-safe
- Validate the sub claim before merging UserInfo
Downloads
-
v6.0.0.5 Stable
released this
2026-10-14 16:04:10 -07:00 | 9 commits to main since this releaseRepository URL: https://gitea.narnian.us/api/packages/lordwelch/generic/jellyfin-plugin-oidc/latest/manifest.json
- Fix an issue where the redirect would not work on a non-subpath installation
Downloads
-
v6.0.0.4 Stable
released this
2026-09-18 11:27:02 -07:00 | 10 commits to main since this releaseRepository URL: https://gitea.narnian.us/api/packages/lordwelch/generic/jellyfin-plugin-oidc/latest/manifest.json
- Fix an issue where configuration would not merge correctly
- Attempt to automatically reset OIDC authentication if login fails
Downloads
-
v6.0.0.2 Stable
released this
2026-09-08 13:57:22 -07:00 | 16 commits to main since this releaseRepository URL: https://gitea.narnian.us/api/packages/lordwelch/generic/jellyfin-plugin-oidc/latest/manifest.json
Features
Update to jellyfin 12
Downloads
-
v6.0.0.1 Stable
released this
2026-09-08 13:16:23 -07:00 | 19 commits to main since this releaseRepository url: https://gitea.narnian.us/api/packages/lordwelch/generic/jellyfin-plugin-oidc/latest/manifest.json
Features
- Remove SAML
- Enforce https. http (port 80) is no longer supported
- Show needed OIDC urls in the configuration
- All user configuration control (except admin role) is moved to OIDC claims
- Link users using the "Sub" claim
- This ensures that users don't get accidentally overridden once they are linked
- Set defaults appropriate for Pocket ID
- Use authenticated request to retrieve avatar
- Updated configuration pages with defaults filled in
- Enable pushed authorization by default
- Add link to plugin configuration in admin dashboard sidebar
Developer changes
- Inject js into auth iframe to use ApiClient instead of implementing it manually
- Use a more standard method of injecting json into the auth page
- Inject html head section from index.html to get proper styling on custom pages and access to ApiClient when logged in
- Remove SSOViewsController. Add linking page to SSOController
- Copy security headers from Jellyfin Security
- Move all web files into Assets
- Actually use namespaces instead of including everything into one namespace
Downloads
-
config update Stable
released this
2026-07-26 17:17:24 -07:00 | 35 commits to main since this releaseDownloads
-
url fix Stable
released this
2026-07-26 16:46:26 -07:00 | 36 commits to main since this releaseDownloads
-
js Stable
released this
2026-07-26 16:38:12 -07:00 | 37 commits to main since this releaseDownloads
-
base url Stable
released this
2026-07-26 16:29:09 -07:00 | 38 commits to main since this releaseDownloads
-
web Stable
released this
2026-07-26 16:14:04 -07:00 | 46 commits to main since this releaseDownloads