90 Commits

Author SHA1 Message Date
f6c4f4df86 Merge remote-tracking branch 'vanutp/main' 2026-03-07 16:47:32 -08:00
mandos21
475048a32e Fixed KeyNotFoundExceptions in PostOid flow 2026-02-02 21:20:49 -05:00
jon4hz
5b3d70d328 fix: invalidate state immediately after auth 2026-01-14 20:36:04 +01:00
Ersei Saggi
547eabf55f Invalidate tokens after authentication
In certain cases, users who had their access revoked could log back in.
2026-01-12 17:46:02 -05:00
Ersei Saggi
48d75325b5 Use Jellyfin's HttpClientFactory
This should respect proxy settings and set a proper user-agent
2026-01-12 17:35:29 -05:00
Ersei Saggi
cdce0e583d Add loggerFactory to XML comment
Makes CI happy
2025-12-21 02:41:32 -05:00
Ersei Saggi
0e897f922f Allow not loading profile information from user info endpoint 2025-12-18 15:14:34 -05:00
Ersei Saggi
afbab1073e Add logging for OIDC library 2025-12-18 15:14:32 -05:00
Ivan Filipenkov
8a89c4b6e1 Update OIDC users' usernames to match canonical ones 2025-10-31 22:29:01 +01:00
Ivan Filipenkov
87aacf0d90 Link OIDC users by the sub claim instead of username 2025-10-31 22:27:10 +01:00
Ersei Saggi
0738ad85f7 Fix warnings 2025-08-12 14:22:31 -04:00
Ersei Saggi
3459baffdf More Jellyfin 10.11 fixes 2025-08-12 13:49:09 -04:00
Feiko Joosten
f761dea356 Removed trailing whitespace 2025-04-05 18:59:36 +02:00
Feiko Joosten
55f58ecedd Prevent force updating username
Fixed an issue where you cannot modify the username as the code tried to find users by name instead of its id.
2025-04-04 01:58:01 +02:00
Borja Domínguez
ae0ee62f21 Merge branch 'main' into allow-port-override 2025-03-26 16:32:12 +01:00
9p4
9c0597a5bc Merge pull request #202 from Estyms/main
Avatar via OIDC Provider
2025-03-26 11:18:24 -04:00
Borja Domínguez Vázquez
d7351ef596 Change EOL 2025-03-24 21:44:34 +01:00
Borja Domínguez Vázquez
07315a124c Change EOL 2025-03-24 21:43:44 +01:00
Borja Domínguez Vázquez
6f77735248 Allow to disable pushed authorization 2025-03-24 20:12:48 +01:00
Borja Domínguez Vázquez
73b6c17518 Allow port override 2025-03-24 20:06:28 +01:00
Borja Domínguez Vázquez
86dcd4c579 Better error handling 2025-03-24 20:04:44 +01:00
Borja Domínguez Vázquez
553c88873e Replace deprecated oidc dependency 2025-03-23 15:00:26 +01:00
Andre Blanke
a2064c1f17 Support DisableHttps/DoNotValidateIssuerName in OidChallenge 2025-03-03 16:54:28 +01:00
Evann Regnault
2cf4230bd6 Merge branch 'main' into main 2025-02-28 04:28:39 +01:00
Ersei Saggi
91c57b18f5 Allow for Fsharp code to be included 2024-11-05 15:17:02 -05:00
Evann Regnault
feb56ebdd6 [AvatarUrlFormat] Better Handling
- Mimetype is now inferred by the Response header.
- Extension is now derived from the Mimetype
2024-08-04 13:41:37 +02:00
Evann Regnault
95d2c36e2c Added AvatarFormatUrl to programatically set avatar on SSO Connect with OIDC 2024-08-04 03:00:06 +02:00
Ersei Saggi
2e8c19d631 Update for Jellyfin 10.9 2024-05-13 09:17:42 -04:00
Ersei Saggi
d51e5069d6 feat: allow for better endpoint validation 2024-02-20 09:11:48 -05:00
Ersei Saggi
9321c25f20 feat: allow linking to work with new paths 2024-01-11 09:56:45 -05:00
Ersei Saggi
cb26ba9852 Add yet another null check in SAML 2023-10-18 01:09:33 -04:00
Ersei Saggi
1b6761bf73 fix: add another null check in SAML for the default provider 2023-09-01 15:59:13 -04:00
Ersei Saggi
e65c5add95 fix: a few more null checks 2023-08-29 13:06:02 -04:00
Ersei Saggi
f37e8dd3bb fix: handle empty and invalid strings in the schemeOverride 2023-08-07 12:14:52 -04:00
Ersei Saggi
9b667b3175 feat: allow overriding redirect scheme 2023-08-07 12:09:51 -04:00
Ersei Saggi
657f90ef13 fix: make SAML paths better; improve and add OID discovery defaults 2023-08-06 16:19:53 -04:00
Ersei Saggi
defab9c4e8 feat: clarify redirect paths (#84) 2023-08-06 14:32:05 -04:00
Ersei Saggi
0d19a3376f feat: Allow Live TV management 2023-08-05 18:04:28 -04:00
Ersei Saggi
1de72effca fix: Check for Roles being null in configuration for openid 2023-08-05 17:31:06 -04:00
Esmond
c6cac45004 fix: error in logs for #81 (#100) 2023-01-01 16:21:58 -05:00
Esmond
dfd519ae9d fix: null check before trim() (#99)
* null check before trim()

* fix: #97 null check before trim()

* fix: apply null check to all trims
2022-11-06 21:53:55 -05:00
9p4
40120dd127 fix: #83 Trim whitespace in user provided strings (#89) 2022-11-03 22:42:56 -04:00
9p4
fa46806dc5 feat: allow for HTTPS to be disabled in OpenID discovery (#77)
* feat: allow for HTTPS to be disabled in OpenID discovery (#76)
2022-09-09 10:19:48 -04:00
9p4
facf45058f Merge branch 'main' into custom-username-claim 2022-08-23 19:32:16 -04:00
Sambhav Saggi
672fce8189 fix: prevent null passwords when fallback is set to default provider 2022-08-23 19:22:02 -04:00
Sambhav Saggi
332f62d76e feat: allow configuration of preferred username claim (#47) 2022-08-23 18:18:42 -04:00
9p4
47db5cb504 Merge pull request #71 from fredriklindberg/improve-get-request-base
fix: don't include port in redirect URL for 80 and 443
2022-08-23 18:12:19 -04:00
Fredrik Lindberg
d06f680407 fix: make user creation more robust
Reverse logic of CreateCanonicalLinkAndUserIfNotExist() to first check if the user exists,
then create the canonical link. This allows seamless re-creation of users through SSO after
they have been deleted from Jellyfin but not properly de-linked.
2022-08-18 17:55:41 +02:00
Fredrik Lindberg
976a816d8c fix: don't include port in redirect URL for 80 and 443
Skip port number in redirect URLs during the following conditions
 - The request scheme is http and request port is 80
 - The request scheme is https and request port is 443

This creates redirect urls as https://server/path instead of https://server:443/path
2022-08-18 17:48:37 +02:00
Matthew Strasitoto
843873d8d5 fix: improve 403 failure message 2022-08-14 13:13:07 +10:00